With over 430 GitHub stars and designed for DevOps engineers, platform teams, and homelab operators, Sencho is the self-hosted Docker Compose control plane that gives you a real operational cockpit without abandoning file-on-disk compose workflows. The web dashboard provides live CPU, memory, and disk sparklines per container, one-click start/stop/restart controls, and a Monaco-powered YAML editor with syntax highlighting, inline diff, and one-click rollback. Compose files remain the source of truth on the host filesystem. Multi-node management connects remote Sencho instances via authenticated HTTP and WebSocket proxy using long-lived API tokens, with no SSH access or exposed Docker sockets required. The Pilot Agent establishes an outbound-only WebSocket tunnel for nodes behind NAT, CGNAT, or strict firewalls. Blueprints define compose intent once and deploy it across label-targeted nodes, with drift detection keeping the fleet aligned. Fleet Federation provides cordon and pin controls for maintenance windows, while Fleet Actions execute bulk deploy, stop, and restart operations by stack label across the entire infrastructure. The security suite includes Trivy vulnerability scanning, deploy enforcement policies, SARIF and SBOM export, and Fleet Sync to replicate scan policies across replicas. Additional capabilities include 199+ one-click app templates, Git source integration, atomic deploys with auto-rollback, auto-heal, scheduled operations, webhooks, and custom S3 off-site backups to MinIO, R2, B2, or AWS. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

BitRouter is a context-aware LLM router that learns which model delivers the cheapest successful outcome per workflow step, cutting agent costs by up to 80% while maintaining 96% quality versus all-frontier baselines. Point any agent runtime at http://localhost:4356 with a one-line OPENAI_BASE_URL change and BitRouter routes to OpenAI, Anthropic, Google, Groq, DeepSeek, Mistral, Moonshot, MiniMax, Nvidia, and any OpenAI-compatible endpoint simultaneously, normalizing authentication, streaming, and cross-protocol translation between wire formats. The act-observe-evaluate-learn loop traces every hop with cost, tokens, and latency attribution, scores each decision against a versioned policy-lock.yaml, then tightens routes automatically with no LLM judge in the path. Native MCP gateway auto-discovers tools from connected servers and makes them routable and governed alongside model calls. Agent Client Protocol integration enables the TUI to manage Claude Code, Codex, OpenCode, OpenClaw, Gemini, and Copilot sessions in real time with inline tool-call approval and live streaming. Built-in guardrails inspect, redact, or block risky content before requests leave your network. Virtual keys scope API access per agent or user without exposing upstream credentials. Per-agent spend caps and loop guards contain runaway cost automatically. Multi-account failover reroutes mid-run so rate limits never re-pay completed work. Ships as a single Rust binary via npm or Cargo. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

When a production alert fires at 3 a.m., Regen is the self-hosted on-call and incident management platform that makes sure a human answers it, keeping alerts, incidents, schedules, and escalations on one shared timeline instead of split across three tools. Alerts stream in from Prometheus Alertmanager, Grafana, AWS CloudWatch, or any webhook, and deduplication collapses repeat firings before Regen opens an incident automatically; responders can also declare one by hand and let AI draft the title and summary. Layered on-call rotations absorb overrides, holidays, and leave, while multi-step escalation policies with timeouts keep paging the next person until somebody acknowledges, so a critical page never dies in one inbox. The incident timeline syncs to Slack and Microsoft Teams, where bot commands acknowledge, escalate, and post updates without leaving chat, and Telegram notifications cover teams that live there instead. One-click summaries and handoff digests brief the incoming shift, editable postmortem drafts are assembled from the timeline using your own templates, and similar past incidents resurface with what worked last time. AI is bring-your-own-key through OpenAI, Anthropic, or a local Ollama model, and the platform loses nothing core if you never enable it. Schedules and escalation policies import in one click from PagerDuty, Grafana OnCall, or Opsgenie, SAML single sign-on through Okta, Azure AD, or Google Workspace is free, and nothing caps your incidents, schedules, or postmortems. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Every cable, switch port, VLAN, and rack unit in a homelab or small server room gets a documented place in Rackpad, a self-hosted inventory and operations workspace. Rack elevations show mounted gear, including paired half-width appliances. Switch-panel port maps and aggregate ports show what is patched where. Cables carry type, length, and color, editable in bulk. VLANs, subnets, DHCP scopes, reservations, and zones sit in one Networks workspace, with gateway and DNS protection and a mismatch review for IP assignments. Storage topology follows drives, bays, and pools that span several devices. Wi-Fi controllers, access points, hypervisor hosts, and virtual machines have pages of their own, and Proxmox and Hyper-V hosts can be imported after review. Discovery scans a subnet or any CIDR and stages every finding in an inbox. Per-device checks over ICMP, TCP, HTTP, HTTPS, and SNMP raise alerts by email, Discord, or Telegram. Everything feeds a movable topology map. Markdown runbooks attach to devices, and an audit log records every change. Admin, editor, and viewer roles control access, and OpenID Connect login is optional. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Page views, funnels, session replays, error reports, Core Web Vitals, and uptime checks share one cookieless dashboard in Betterlytics, so teams stop stitching several tools together. The overview charts visitors, page views, bounce rate, and visit duration against the previous period, and annotations mark launches or campaigns right on the timeline. Breakdowns cover referrers, channels, UTM campaigns, browsers, devices, and operating systems, with visitor locations on a world map once an optional MaxMind key is added. Custom events, global properties such as plan or app version, and outbound link tracking show what visitors actually do, while user journey diagrams and funnels reveal where they drift away. Session replay is opt-in per tracking script, masks text and form inputs by default, and can keep recordings in your own S3-compatible bucket. Error tracking groups JavaScript errors with stack traces, a session trail, and a link to the matching replay. Uptime and SSL monitors alert through Slack, Discord, Teams, or webhooks and feed public status pages on your own domain. Teammates join by invitation, two-factor login is available, and a built-in MCP server lets Claude, Cursor, or Codex answer traffic questions. A script of about 3.5 KB or a WordPress plugin handles installation. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Pagesift converts messy web pages, PDFs, and Office documents into clean Markdown and structured JSON that language models can actually use, from one self-hosted binary you run yourself. Call it the way you already call Firecrawl: the HTTP API speaks the Firecrawl v1 and v2 formats, so existing scrape, crawl, and batch jobs point at your server instead, and a Jina Reader style endpoint answers simple /r/ URL requests. Scrape a single page, submit batches, or crawl whole sites with sitemap support, focused crawling by query, robots.txt respect, and per-host rate limits by default. Headless rendering kicks in only when a page needs JavaScript, keeping plain pages fast. Documents work offline too: Word, Excel, PowerPoint, EPUB, and CSV files become Markdown with titles, links, images, and publication metadata attached. Jobs persist so long crawls survive restarts, webhooks report completions, and per-API-key limits and quotas keep multi-tenant use civilized, with Prometheus metrics and a health endpoint for operators. AI agents can drive the same engine directly through the bundled MCP server over stdio or HTTP, while developers get Python, Node, and Rust libraries. Memory stays bounded under load by design, sized from container limits rather than hope. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

"Get to your most important links, FAST" - Hiccup's README states its whole mission in that one line, and the static start page delivers it. It is a client-side React single-page app - no backend, no database, no accounts - driven entirely by a config.json that defines featured link cards, categorized sections, and search providers. The search bar is the power feature: it queries your own links by name, URL, and tag while simultaneously offering external providers like Google, DuckDuckGo, and Amazon (plus custom URL-template providers you define), with arrow-key navigation and Enter to launch, so muscle memory replaces mousing. Editing happens in the browser - drag and drop links and background images, tweak cards in edit mode - with changes persisting to localStorage; a built-in config manager exports the JSON for hosting, and remote profile loading pulls a shared config across every browser and device you use. Multiple profiles keep home-server, work, and dev-tool link sets separate. PWA support installs it on a phone home screen, caching strategies keep it fast offline, read-only mode suits kiosk displays, and Cmd/Ctrl+/ reveals the full hotkey reference. Serve it from any static host and point your new tab at it.

From the German "zusammen," together: Zusam is a private social space for a group of friends - a self-hosted alternative to the family WhatsApp group or the friends Facebook group, with no ads, algorithms, or data harvesting in between. The AGPLv3 project is deliberately modest in scope and stack: a Symfony PHP backend exposing a REST API over SQLite, with a lightweight Preact single-page frontend, designed for a low server footprint that runs comfortably on small hardware. Groups post messages into shared feeds that handle real life well: video and image uploads (with FFmpeg processing), photo albums for trips and events, and rich link previews with inline embeds for YouTube, Vimeo, Imgur, SoundCloud, Twitch, and Bandcamp - so sharing a song or a clip looks the way it should. When something needs to leave the circle, public link generation exposes a single message to non-members without opening the group. The interface is fully responsive and mobile-friendly, targeting Firefox ESR and recent Chrome. It is the small-web answer to a real question: where does a group chat's shared history live when you want it owned by the group instead of a platform?

Thesys is a research workspace where you search academic papers, build your own library, and ask questions that answer with citations you can click straight onto the highlighted passage of the PDF. Discovery searches OpenAlex and arXiv in one pool, so a paper you find can be previewed and added to your library without leaving the workspace. Uploaded PDFs are ingested locally, and when you ask a question the answer cites its sources in the document, jumping the preview to the retrieved passage with either a full-passage or a tighter focused highlight. Reader mode opens a paper full-width so you can select any span of text and ask about that exact passage. Document summaries follow a consistent structure of problem statement, methodology, key findings, limitations, and metrics, with citations that still land on the source text. Figures and flowcharts are described during ingest, so questions and summaries can reference them too. When two papers disagree, Compare mode takes one claim and classifies each retrieved pair as corroboratory, contradictory, or neutral, with confidence shown in a side panel. Your bibliography exports as BibTeX, RIS, EndNote, or CSV for whatever reference manager you already use. Papers, embeddings, and chat history stay on your own disk the whole time. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Ruvio is a Redis-compatible in-memory database that folds the cache, the lock service, the rate limiter, and the delay queue into one Rust process your existing clients already speak to. Connect with redis-cli or the first-party clients for Rust, .NET, Go, Java, Python, and Node.js, and the familiar strings, hashes, lists, sets, sorted sets, and streams are there, 287 commands in all. The difference shows in the primitives that usually need a second system: LEASE grants a fencing token for a key, SEMAPHORE caps concurrent holders with per-holder TTLs, INCRBY with MAX builds a counter that refuses to pass capacity, SETV writes only when your version is still current, CHANGES arms a feed of later writes on a shard, and XADD DELAY stores a stream entry now and reveals it to consumer groups when the delay passes. Each shard owns its keys outright, parsing, recording, and applying without a lock on the hot path, and features cost memory only on keys that use them. Durability is a startup choice you name, memory, snapshot, everysec, or always, written through a write-ahead log, and replicas copy shard by shard while optional coordinators agree through Raft to promote a replica when a primary stops answering. A browser operator UI shows data, command forms, Pub/Sub, and ACL users on the running server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Generic AI writing sounds like nobody in particular; BullFlow writes from your own company knowledge instead. It first builds a private knowledge base from your documents, images, audio, and video plus structured records for your company, brand, products, customers, and cases. Ingestion runs entirely on local open models: OCR reads scans, semantic splitting and chunking prepare text, and hybrid vector plus full-text search retrieves passages with their sources and relevance scores shown under every answer. A creation agent then works in one conversation: it searches the knowledge base, drafts articles with images embedded in the text, generates image sets or short videos, and exports finished pieces as PDF or Word. Output adapts to where it is going, long-form articles for article platforms, multi-image posts with matching copy for image feeds. A separate distribution gateway sends one finished piece to many accounts across Chinese and international social platforms, checks account health on a schedule, and returns publish results and metrics by webhook. Around all of that sits a commercial shell: multiple tenants with isolated data, roles from super admin to finance, credit billing measured per token, image, and second, subscriptions, invoices, referral commissions, and a conversion funnel in the operations backend. Scheduled rules can generate and publish on a timetable with nobody watching, and notifications report each completion or failure. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

The inverter app tells you the sun shone; SOLECTRUS tells you what that sunshine was worth. It is a dashboard for your whole photovoltaic system that balances every watt: what the panels produced, what the house consumed, what the battery stored, and what crossed the grid meter in either direction, for any period you care to name. Up to five generators, from the main roof array to a balcony power plant, appear individually or summed, and up to twenty custom consumers, wallbox included, get their own accounting. The Power-Splitter shows how much green electricity actually landed in the car, the heat pump, or the washing machine, and what each load truly cost once lost feed-in revenue counts. Enter your electricity prices and feed-in tariff, including their changes over the years, and it computes savings, self-consumption costs, return, and the day the system has paid for itself from measured data rather than the sales brochure. Forecasts from pvnode, Solcast, or Forecast.Solar look up to seven days ahead using your location, orientation, tilt, and peak capacity. Heat pump owners see generated heat and coefficient of performance beside the power draw. Everything lands in InfluxDB and stays there, with daily aggregation keeping multi-year views fast, trends against last month or last year, and a Top-10 of your best and worst days. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

ClientSt0r is a self-hosted operations platform for managed service providers that keeps client documentation, IT assets, credentials, and the service desk in one multi-tenant system running on your own infrastructure. Open any ticket and the client's active contract, the asset it concerns, the runbook that covers it, and the vault entries you are allowed to use appear alongside the conversation, so nobody switches between four products during an outage. Readiness scoring grades every client against what should be documented, explains each gap, and queues the fixes, while versioned documents with owners and review dates keep runbooks from quietly going stale. The credential vault encrypts secrets with AES-256-GCM, isolates them per client, enforces IP, geography, and time-of-day access rules, logs every reveal, generates TOTP codes, checks passwords against known breaches, and imports existing Bitwarden or Vaultwarden libraries. Asset records cover hardware inventory, IP address management, rack layouts, and printable QR labels. The service desk adds queues, SLA timers, dispatch views, time entries, quotes with electronic signatures, invoices, contracts, approvals, a workflow rule builder, a threading email engine, and guided client portal forms, while procurement, profitability reporting, CVE scanning, SSL expiry tracking, and uptime monitoring round out daily operations. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Enterprises requiring production-grade governance for long-running autonomous AI operations can rely on OpenGeni, a self-hosted orchestration platform with human-in-the-loop approvals, Connected Machine execution, and comprehensive audit replays. Operators can configure durable multi-turn workflows that execute continuously toward specified goals without premature termination, automatically pausing when human verification, structured multiple-choice decisions, or critical credential approvals are required. Teams can assign execution workloads across ephemeral cloud sandboxes or route them straight to enrolled Connected Machines to run commands directly against local code repositories without exposing inbound network ports. The integrated web console lets developers inspect live Server-Sent Event activity streams, replay complete turn histories from audit logs, inspect generated artifacts, and cancel or steer in-flight agent tasks on demand. Platform administrators can enforce fine-grained access policies through GitHub App repository bindings, broker temporary role-scoped secrets, and maintain a shared organizational knowledge base where agents propose findings for human review before vector indexing. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

CAPTCHAs make every visitor solve a puzzle to prove they are human; Mosparo takes the opposite route and checks the submitted content itself, no challenges, no image grids, and no tracking cookies. Drop the customizable checkbox widget into any form and Mosparo inspects each field separately, scoring the entry against your rules the way an email spam filter scores a message. Build field rules for banned words, domains, email addresses, IP addresses and subnets, providers, Unicode blocks, user agents, and websites, each with its own rating weight, or subscribe to shared rule packages that refresh themselves automatically. Every submission lands in an admin inbox with its spam rating, IP address, and verification status, and dashboard charts show valid versus spam traffic plus delayed or blocked requests over time. Legitimate users notice nothing but a plain checkbox, which stays fully usable with assistive technology, while everything Mosparo stores is encrypted and automatically deleted after 14 days. Run one instance for many sites with separate projects, project groups, and member roles, and connect your forms over the documented API from any stack that can send an HTTP request. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

CaseCite puts a law firm's own files under questioning, returning cited answers, contract reviews, and drafted agreements without surrendering a single document to an outside legal platform. Ask a question across the indexed corpus and receive answers tied to the exact source passage, then narrow the search to selected files or a folder when only those should count. For bigger questions, deep research lays out a plan of sub-questions you can edit first, verifies every quote against its source, and keeps a step log of what was searched. Contracts can be analyzed, questioned one at a time, or compared clause by clause across two to four agreements against a baseline, with redlines exported as native Word tracked changes. Tabular review extracts the fields you define from hundreds of contracts at once, shows the supporting passage and estimated cost beside each value, and exports to Excel or CSV. Drafting starts from up to four precedent documents, and long agreements get a section plan for your approval before each section is written and reconciled. Each client engagement lives in its own matter workspace with controlled access and an activity feed, while case lookup, citation checking, judge analytics, dockets, oral arguments, and authority maps cover the caselaw side. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Noisedash is a self-hosted soundscape studio that generates the ambient noise you wish your surroundings made, from steady fan hums to layered rainstorms, and plays it in any browser. Start from white, pink, or brown noise and shape it with filters, LFOs, and effects until the hum in your head goes quiet. Upload your own recordings of rain, wind, thunder, or a café at noon, set loop points and fade-ins, and drop them into the mix as a continuous bed or an occasional sprinkle. Add reverb to a sample, let a thunderclap wander in every few minutes instead of looping, and balance every layer until the room feels right. Save the result as a noise profile, keep one for sleeping and another for deep work, and switch between them with a tap. Profiles travel: export one to share with a friend, import theirs, or record the generated audio to take the soundscape somewhere else entirely. An instance can host the whole household, with admin tools managing users, and the interface works as happily on a phone beside the bed as on a desktop. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Instead of paging through albums, Photofield lays a whole photo library out on one zoomable canvas, where thousands of thumbnails sharpen into full-resolution pictures as you zoom. Collections come straight from directories named in a configuration file. One setting turns every subfolder into its own collection. Pick a layout per collection: album grouped by date, timeline with month markers, wall, map, highlights with dates and place names, or flex. Sort oldest first, newest first, or shuffled hourly, daily, weekly, or monthly. Tiles load progressively, and an info drawer shows the date, file name, and dimensions. A right-click menu opens or copies an image, copies its link, or finds similar images. Originals are never modified, so a read-only mount is safe. Indexing runs at up to 10,000 files per second on a fast SSD with a warm cache. JPEG, PNG, AVIF, HEIC, DNG, GIF, MP4, and MOV files are recognized. Place names resolve from an embedded database, with no external lookups. The optional photofield-ai companion adds search by words like beach sunset or cat eyes, plus a Faces layout of detected faces. Alpha tagging lets you label photos. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.