Lunarr turns the movie and TV folders you already store into a private streaming service with posters, progress tracking, and play-anywhere convenience. Point it at local disks or at libraries living on SFTP and WebDAV servers, and it scans, identifies, and decorates everything with TMDb artwork, cast pages, similar titles, and because-you-watched recommendations. Press play and the file either streams directly or is transcoded on the fly into seekable HLS, generating only the segments around the moment you are watching instead of converting whole films up front. Continue watching follows you between sessions, sidecar subtitles are picked up automatically, and known intros and credits can be skipped. Send the picture to the big screen with Chromecast or AirPlay, pair new devices without typing passwords, and hand a guest a share link instead of your account. Underneath, an admin console manages users, roles, and which libraries each person may see, watches background jobs, and holds API keys and registration settings. Rescans run on schedules you set from minutes to a month, local folders can be watched live for new arrivals, and metadata refreshes itself on a timer. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Your files already live in five places; filex puts them in one tree and serves that tree back out through almost any protocol. Mount local disks, S3 buckets, SFTP servers, WebDAV shares, FTP sites, and SMB network drives side by side, then copy in one storage and paste into another without thinking about where anything physically sits. The same tree is reachable as S3, SFTP, FTPS, NFS, and WebDAV, so rclone, restic, the AWS CLI, WinSCP, or FileZilla all work against it with the same per-user and per-folder permissions as the web interface. Sharing leaves the server under your control: public links carry a PIN, an expiry, and a download limit, and file-request links let people upload into a folder without seeing its contents. Anything deleted stays recoverable inside a retention window, overwritten files keep version snapshots, and encrypted folders are sealed in the browser so the server never receives a key. People sign in with OIDC single sign-on, LDAP or Active Directory, or the host machine's own accounts, with roles, groups, and tenants plus folder-level exceptions. A desktop app keeps chosen folders in sync within about a second, the file manager embeds into other products as a web component, and an MCP server plus REST API let agents work the same tree. It runs from one static binary or container on port 5212. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Enterprise security stacks assume an enterprise budget; Wildbox assumes a server you already own. It runs your whole security operation as a set of cooperating services behind a single HTTPS gateway: threat intelligence collectors pull indicators from seven public feeds on a schedule, starting with abuse.ch's Feodo Tracker, and every indicator is searchable in one place. Fifty-two security tools sit behind one API, covering DNS, TLS, email security, headers, and port analysis. The cloud posture service runs 22 configuration checks against your live AWS accounts and keeps each scan's report, while the vulnerability service inventories your assets, prioritizes findings by risk, and tracks them through remediation with SLA checks and alert rules. When something needs doing, YAML playbooks execute response workflows as background jobs, and the agents service writes Claude-generated threat-enrichment reports for suspicious indicators when you give it an API key. An osquery-based sensor streams endpoint telemetry from your hosts into the platform, kept separate per team. Users, teams, roles, and scoped API keys live in the identity service, and the backends accept nothing that did not arrive through the gateway, so your security data never leaves hardware you control. Optional Compose profiles add n8n automation and Prometheus monitoring. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

One notify() call is all your product needs to reach users on push, email, SMS, chat, and webhooks, with NotifKit deciding how and when each message travels. List the channels in the order you prefer and NotifKit tries each in turn, so a failed push quietly becomes an SMS or an email instead of a lost message. Per-user preferences, consent, and quiet hours in each user's own timezone hold non-urgent sends until morning, while critical messages such as one-time passwords travel their own lane immediately. Templates, multi-step workflows that wait days or block on events, scheduling, throttling, and deduplication all run behind that single call, defined in TypeScript and kept in your repository. Delivery logs record every attempt, and the admin dashboard shows a live activity feed, queue depth per priority lane, workflow runs step by step, and a replayable dead-letter queue. Several products can share one deployment as separate projects with their own API keys, rate limits, and data, and any service can call the REST API without the TypeScript SDK. Ask an AI assistant why a password reset never arrived by connecting the built-in MCP server to Claude Code, Cursor, or another MCP client. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Drop a single container onto your host to launch Iso, a minimalist self-hosted startpage and service launcher that organizes every homelab web application behind a clean isometric icon grid and integrated search bar. No external database is required. Everything lives inside one human-readable JSON file or gets edited directly through the in-browser visual configuration modal. Add new service tiles in seconds, drag to reorder their display priority, and pick from a curated library of 3D isometric icons or upload custom graphics up to 25 megabytes. Switch instantly between built-in color palettes like Amethyst or upload a custom wallpaper with adjustable background blur and opacity sliders. A central search bar sits at the top of your startpage, routing queries directly to Google, DuckDuckGo, Startpage, Qwant, Searx, Bing, or any custom query URL template. Localize the interface into English, Spanish, French, or German with a single toggle. Custom greeting banners and optional page-load animations personalize the daily browsing experience for family members or lab users. Protect the dashboard and its visual editor behind shared password authentication configured via environment variables. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

HitKeep is a sovereign web analytics platform that consolidates cookieless visitor telemetry, conversion funnels, e-commerce revenue reports, and AI engine visibility into a privacy-respecting dashboard that replaces Google Analytics and complex tracking clouds. Marketing teams can monitor inbound visitor journeys without installing intrusive consent banners or violating regional GDPR regulations. Custom conversion funnels and goal milestones track user registrations, checkout transactions, newsletter subscriptions, and software downloads with exact revenue attribution. Integrated Google Search Console synchronization brings organic search queries, keyword impression rankings, and click-through metrics directly alongside real-time pageview logs. A dedicated artificial intelligence visibility dashboard monitors crawling bots, retrieval citations, and direct referral visits originating from ChatGPT, Claude, Perplexity, and other generative search agents. Growth analysts can pose natural language questions to an embedded AI reporting assistant, generating instant cohort breakdowns and engagement trends without assembling complex manual filters. Site operators can configure custom tracking domains, whitelist reverse proxy networks, filter out referrer spam, and schedule automated database backups across persistent storage volumes. Complete data sovereignty controls allow teams to export raw event telemetry into open Parquet and CSV archives or stream metrics into external business intelligence warehouses via webhooks. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Running a VPN for family, friends, or a small team usually means babysitting servers one SSH session at a time, and Mistgate replaces that with one panel that keeps the whole fleet configured. Add a server from the browser by typing its address and root password: the panel pins the host key, checks the host, opens the ports, and installs the signed node agent for you. Each person gets one subscription link that their app turns into the server list, or a personal AmneziaVPN key per device, so a lost phone can be revoked without touching anyone else. Groups decide which protocol profiles a person receives, while per-user traffic quotas, expiry dates, device limits, and per-device speed limits keep sharing fair. Hysteria2 brings QUIC-based speed with port hopping, obfuscation, and certificate options; VLESS REALITY and AmneziaWG 2.0 and 3.1 cover networks where one protocol gets blocked, and Cloudflare WARP can serve as the exit for all three. Every five minutes the panel connects to each server the way a real client app would, a doctor on every node runs host checks with safe fixes, and alerts reach you on Telegram before your users notice. The public address shows strangers a decoy site while the admin hides behind a secret path, and encrypted backups go to your Cloudflare R2 bucket on a schedule. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

If your money is split across a bank app, a brokerage portal, and a half-abandoned spreadsheet, YAFFA, a self-hosted personal finance application, gathers it into one ledger with budgets, scheduled transactions, and forecasts. Record withdrawals, deposits, and transfers across unlimited accounts, and split a single supermarket receipt across categories so it lands in both Food and Household. Suggestions surface your most-used accounts and payees, and each payee's default category fills in automatically. Define rent, salary, or a loan payment once as a scheduled transaction; it appears on the dashboard calendar, enters with one action or records itself, and feeds the forecast. Import bank history from CSV or QIF files with rules for country- and bank-specific formats, and review every row before it is recorded. Optional AI document processing turns a receipt, invoice, or forwarded email into a draft transaction with payee, date, amount, and line items, using your own OpenAI or Gemini key and self-hosted Tesseract OCR for images. Accounts in different currencies roll up into your default currency using daily rates from the free Frankfurter service. Investments track gain and loss, with optional daily prices from Alpha Vantage. The dashboard summarizes accounts and upcoming schedules, the cash flow report can look ahead with a forecast, and Find Transactions filters history by payee, category, tag, or date. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Bots that knock on your server's login ports are always turned away by Knock-Knock, a multi-protocol honeypot that shows every attempt on a live dashboard. Honeypots answer on the standard ports for SSH, Telnet, FTP, RDP, SMB, SIP, HTTP, and SMTP, with MQTT, Node-RED, Modbus, S7, and SNMP as optional extras. Authentication is always rejected, so no bot ever gets a shell. Who is knocking? The live feed shows each attempt's country, username, password, ISP, IP, and protocol. From where? A 3D globe marks the origin in one of six styles, including an extruded country heat map. Trying what? Leaderboards rank countries, usernames, passwords, ISPs, and IP addresses, and a trivia panel explains why bots favor certain credentials. A protocol filter re-slices the feed, globe, and leaderboards together; SIP shows dialed numbers and toll-call destinations, and RDP shows hostnames and accounts. Too fast? Press the space bar to pause, right-click any knock for details, or switch on a virtual Geiger counter that clicks as attacks arrive. Want to fight back? Download hourly 30-day and 365-day blocklists with recipes for CSF, CrowdSec, ipset, nftables, and pfSense, or query the optional API for any IP, CIDR range, or ASN. Several honeypot servers can stream into one aggregated dashboard. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Folivox turns an ebook sitting on your server into a finished audiobook read aloud in a voice you choose, cloned from a short sample, or performed by a whole cast of characters. Drop in an FB2, EPUB, DOCX, PDF, or TXT file and the studio detects the book language, restores chapters, poems, and epigraphs, cleans page furniture away, and spells numbers, dates, money, and abbreviations out in full for nine fully supported languages. Narration runs locally through CosyVoice 3 or the multi-speaker Fish Audio Drama 3, which can give each character their own voice like a radio play, or through ElevenLabs, OpenAI, Gemini, or Cartesia with your own key after a cost estimate you approve. A markup editor finds the dialogue, assigns lines to speakers, and lets you fix mistakes and listen before committing to a ten-hour render. Every fragment is listened back to with Whisper and re-read until the best take survives, while a crash-safe journal means a stopped render resumes where it left off and edited chapters redo only what changed. The finished book arrives as one chaptered M4B with cover and metadata, or one MP3 per chapter, loudness-normalised and ready for any player. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Follow the channels you actually chose, and let their newest uploads land on your own disk instead of in an algorithmic feed. Yarrtube tracks public YouTube playlists and whole channels, checks them on a schedule, and downloads fresh videos automatically the moment they appear. The built-in web player lets you watch the collected library from a desktop or a phone browser without ads interrupting. Downloads are organized into media-server friendly folders, so the same collection shows up inside Plex, Jellyfin, or Kodi next to your films and shows. For Plex homes, an optional scan trigger refreshes the library right after a download finishes, so new episodes surface without manual rescans. You control download quality per source and can cap how many videos each channel keeps, which protects limited disk space from runaway back catalogs. Grouping sources into categories and smart playlists keeps a growing archive browsable instead of turning into one long dump. Everything runs from one Docker container with two persistent mounts, one for its small database and one for the video files. A free YouTube Data API v3 key powers the new-upload checks, so setup takes minutes. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Built atop the TauricResearch TradingAgents framework with nearly 100,000 GitHub stars, TradingAgents GUI transforms a CLI-only multi-agent LLM stock analysis pipeline into a polished web application accessible at localhost:5000. The system deploys twelve specialized AI agents — fundamental analysts, sentiment experts, technical analysts, bull and bear researchers, a trader, risk management team, and portfolio manager — who collaboratively debate market conditions through structured LangGraph workflows before producing a final BUY, SELL, or HOLD recommendation. The interface supports ten LLM providers including OpenAI, Anthropic, Google, OpenRouter, DeepSeek, Ollama, xAI, Qwen, GLM, and MiniMax, with a first-run wizard that auto-detects configured API keys and tests connections. A live pipeline visualization shows each agent's status with real-time progress bars, while the tabbed output area separates Live Feed, Reports preview, and Tool calls into dedicated panes. The three-pane Reports tab provides searchable indexing, table-of-contents navigation, and export to Markdown, HTML, or PDF formats. Report length control across Concise, Standard, and Comprehensive modes saves up to 50% on token costs. Multi-session chat allows pinning past reports as grounding context with live token counting and context-window warnings. Three built-in themes — Terminal, Modern, and Bloomberg — persist per browser. Docker Compose deployment maps port 5000 with persistent report storage. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Seven columns, one per day, hold your whole week of tasks in Will Be Done, and rebalancing a crowded Wednesday means dragging a card to Friday. Unfinished tasks keep their day and get a quiet yellow marker instead of piling into tomorrow as red overdue badges. The Today view narrows the screen to one day, and Stash holds the few tasks you want close at hand without picking a date. Projects get kanban boards with columns you define, such as Week, Month, Ideas, and Someday, and separate spaces keep work and personal planning apart. Tasks carry descriptions and checklists, and recurring tasks repeat daily, weekly, monthly, or yearly with custom intervals and end dates. Every device holds a full local database, so planning, completing, and rescheduling happen with no network at all, and changes sync across tabs and devices once the server is reachable. Vim keys such as h, j, k, and l move through everything, and a global quick-add shortcut in the Linux, macOS, and Windows desktop apps captures a task without leaving the window you are in. Todoist and TickTick imports bring existing projects along, and a token-protected HTTP API with OpenAPI docs lets scripts, cron jobs, and bots drop tasks straight into your stash. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Manga readers use KamiYomu to build a private, self-hosted library: it fetches chapters from the websites they already follow, archives them locally, and serves everything back through a clean web reader on any device. The discovery flow runs on Crawler Agents, small plugins that teach KamiYomu how a particular source site lists series, chapters, and pages, so searching and fetching metadata happens inside the same interface as reading. Downloads land in a structured local archive, and reading picks up where you left off with history, filters for your library, and weekly views that surface new chapters and fresh releases. When a series is complete, export it as CBZ, PDF, or ZIP and take the files anywhere, no account or cloud library involved. Your e-reader and phone apps join through the built-in OPDS catalog, the same standard used by Moon+ Reader and KyBook, while a Swagger-documented API exposes the collection to your own scripts. Scheduled jobs keep watched series current in the background, checking sources and pulling new chapters without you babysitting tabs. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Managing multi-server container fleets often deteriorates into fragmented SSH sessions, mismatched compose files, and conflicting port allocations. Composr consolidates multiple Docker host daemons into a unified web dashboard that controls running containers, stack definitions, and system metrics from a single interface. Operators can connect remote Docker daemons through encrypted TCP sockets, inspect container health, and stream live execution logs with sub-second responsiveness. A built-in project creation wizard guides administrators through drafting new Compose topologies across local directories or remote server nodes. In-browser CodeMirror editors deliver live syntax highlighting for YAML files, configuration dotfiles, and reverse proxy definitions without detaching containers from disk. The platform tracks service properties directly, letting you toggle Compose profiles, relocate services between YAML manifests with pre-flight risk checks, and detect target port collisions before redeployment. Integrated backup managers bundle container metadata, compose files, and environment definitions into downloadable archive packages for automated disaster recovery. System operators can open interactive browser terminals into any active container, execute batch maintenance tasks, and configure scheduled image update checks. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Your contacts live in four different address books; Contrack merges Apple, Google, LinkedIn, and Facebook into one self-hosted personal CRM you fully control. Importing merges the address books you already keep, and connecting a calendar or inbox lays past meetings and conversations along each person's timeline. Obvious duplicates merge themselves, borderline matches wait in a side-by-side review with field-level differences highlighted, and every merge can be undone for 90 days. A scribbled note such as 'met at Sarah's wedding, catch up quarterly' turns into fields, tags, dates, and reminders, while optional web research fills in roles and links with cited sources. Each morning, Pulse shows who is due a follow-up, whose birthday lands this week, and which friends have quietly gone a year without contact. Ask Contrack answers plain questions like 'who do I know in Lisbon' or 'who loves natural wine' by searching your notes and contacts locally. The map plots everyone by city, and drawing a loop around a neighborhood before a trip turns a visit into a dinner list in seconds. Households share one server while each profile keeps a private book, and the built-in MCP server lets Claude, ChatGPT, or Cursor look up context and log notes for you. One-click verified backups snapshot the whole address book, passkeys handle sign-in, and open exports mean your data leaves whenever you do. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

HabitSync treats habit tracking as a team sport, because willpower alone rarely survives February. Set each habit up the way life actually works: daily, weekly, monthly, on chosen weekdays, or at a custom interval, with a target value to reach or a ceiling to stay under for the habits you are trying to quit. Logging takes one tap, or a long press when today's effort deserves a custom number or a stopwatch. Share a habit with a partner, a sibling, or the whole household and everyone's progress sits side by side, which turns "did you go to the gym" into a question the dashboard answers. Monthly challenges raise the stakes with community voting, leaderboards, and medals for the top performers, while gentle automation watches your back: scheduled reminders when a habit goes unlogged, an alert when your completion slips under a threshold, and a quiet nudge when a friend overtakes you. Years of Loop Habit Tracker history import instead of being abandoned, and the installable web app keeps the streak one tap away on any device. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-3-Clause licensed.

To eliminate YAML indentation errors and cryptic container misconfigurations before running docker compose up, ComposeToolbox pairs a full-featured code editor with a live configuration analyzer in a single self-hostable web workspace. Paste or write any docker-compose.yml file in the left pane to see immediate syntax validation alongside actionable best-practice warnings, such as unpinned latest image tags, missing healthchecks, or deprecated version declarations. On the right side, an interactive Configuration Overview breaks down every defined service, exposed port mapping, persistent volume mount, environment variable, and custom network into structured tabs. Built-in Quick Insert buttons let operators drop new service blocks, volume definitions, or network stanzas into the editor with one click. By mounting the persistent /app/data directory, administrators can define custom quick-insert YAML snippets with selectable hardware and networking icons in custom-templates.yml. Teams can also customize startup-template.yml so the editor opens with their organization's standard homelab or production boilerplate every time the page loads. Keyboard shortcuts, light and dark themes, and one-click YAML formatting or file export streamline daily container authoring. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.