Monitoring and safeguarding Docker infrastructure without heavy enterprise software overhead is the primary mission of Statainer, an open-source management control center for container hosts. System operators inspect live CPU loads, memory consumption, network throughput, and disk I/O metrics across individual containers or comparative top-ranking charts. The interface groups containers by Compose projects, enabling administrators to start, stop, or restart entire application stacks and inspect real-time log streams without opening SSH sessions. The built-in Update Manager detects available image tags, executes single-click container updates, and maintains persistent deployment history with automated rollback capabilities for failed recreations. Custom alert configurations trigger instant notifications to Telegram, Discord, Slack, Pushover, or generic webhook endpoints whenever resource thresholds are breached or container health states change. Developers can provision scoped API keys with token authentication to automate container state transitions and export performance telemetry into custom monitoring workflows. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Doca puts rich text, Markdown, spreadsheets, slides, and an infinite canvas under one login and one permission model, giving individuals and small teams a self-hosted workspace for writing together. Every format supports real-time co-editing with presence, comments, saved history, and manual snapshots, and rich text and Markdown documents can be restored to an earlier version. Documents live in knowledge libraries with tree navigation, invitations, inherited permissions, share links, and trash, while personal files and shared folders sit on local disk or S3-compatible storage. Knowledge books go further: they subscribe to sources, run an editable workflow, keep source evidence, and route results through human review. A personal AI assistant, powered by whichever model you configure, searches authorized documents, reads PDF and Office attachments, edits images, and prepares browser drafts. MCP services let external AI clients such as Codex use those tools under your permissions. Sign in with a password, OIDC, Google, GitHub, WeChat, or QQ, review registrations before they go live, and send webhooks to other systems. A plugin SDK and marketplace add business modules, and a browser extension clips pages into documents. The interface ships in Chinese and English. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Pictaria Server sits beside your Immich instance and makes a photo library of thirty thousand images legible again, surfacing the trips, people, and best shots buried under duplicate bursts and forgotten folders. It starts with Insights: a clickable timeline of your years, detected trips, a people constellation linked by who appears together, place and camera rankings, and records like your busiest day. Click any number and you land on the actual photos, ready to open in Immich, turn into an album, or send onward. Enrich puts an AI to work describing what it sees, writing captions, menu-driven tags, and quality scores for every photo using a local model through Ollama or LM Studio, or a cloud provider with your own key, on a scheduled daily budget. Those tags can sync back into Immich, so searching improves everywhere, not just here. Curate then collapses bursts and near-duplicates into stacks with a suggested keeper, and one keystroke keeps the best and skips the rest. Smart Albums compose rules from people, places, dates, cameras, and tags, preview the result count, and maintain real Immich albums on a schedule. Frame owners get remote control, display metrics, and voice photo questions, while the Activity feed and runtime-editable Settings keep the whole box manageable from the browser. It connects with a limited-permissions API key and cannot delete a single photo. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Radarr, Sonarr, and their sibling apps watch RSS feeds for new releases but never go back for what your library is still missing, and Houndarr fills that gap by asking them to search in small, polite batches. It reads the wanted lists of every connected Radarr, Sonarr, Lidarr, Readarr, and Whisparr instance and sends a few search commands per cycle, so a big backlog drains over days instead of arriving as one Search All Missing burst. Each instance has its own batch size, sleep interval, hourly cap, per-item cooldown, and post-release grace period, plus an optional download-queue limit, allowed search windows such as 09:00-23:00, and tag filters that include or exclude items. Three independent passes run per instance: missing items, cutoff-unmet items below your quality profile, and upgrades for files that already meet cutoff, with the last two off until you enable them. Sonarr, Lidarr, and Readarr can search by season, artist, or author, and search order is random or oldest-first. The dashboard shows library health, recent hunts, hourly budgets, and a cooldown schedule per instance, with Run Now buttons for on-demand cycles. The Logs page records every search and skip with its reason in a filterable audit trail that copies as TSV. A key-gated widget endpoint feeds Homepage dashboards, and built-in login or reverse-proxy authentication protects the interface. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Jellydash answers the questions every Jellyfin admin asks, starting with who is watching right now and whether that stream is transcoding. Live cards show each session's artwork, user, quality, progress, and playback method, including the reason a transcode was needed, and live TV channels appear with real program progress. Behind the scenes, a background poller records every play even when nobody has the dashboard open, building a history you can search, filter by user or library, and export to CSV with poster art intact. Older Jellyfin or Emby Playback Reporting backups import in seconds, so years of viewing are not lost when you switch. Statistics turn that history into watch-time trends, top users, device and client activity, codec breakdowns, and transcode reasons, and clicking a chart opens the exact plays behind it. A monthly recap looks back at a finished month with rankings and daily activity, while trending and all-time most-watched strips show what your household actually loves. Optional pages follow Jellyseerr requests as they arrive and read the status of SABnzbd, qBittorrent, Transmission, Deluge, and NZBGet clients without ever touching their queues. Server activity, maintenance tasks, and system status stay one click away, and selected users can be excluded from monitoring entirely. When someone presses play, a notification can reach your phone through Telegram, Pushover, Discord, ntfy, Gotify, or Web Push. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Immich Insights turns the photo library you already keep in Immich into a year-in-review style dashboard of how you actually shoot. Connect it with your own Immich API key and it reads your asset metadata into a local snapshot, without copying your original photos, then builds the overview Immich itself never shows: total photos and videos, storage used, favorites, albums, and your newest additions. Pick any year or a custom date range and see that period's shooting volume, favorites, albums, and devices. Camera statistics break your library down by device and manufacturer, with leaderboards you can correct when the same camera appears under different names. Exposure analysis shows your ISO, focal length, and shutter speed distributions, the focal lengths you reach for most, and how your settings shift by hour of day. Rhythm charts map your shooting by month, weekday, and hour, with a calendar heatmap of your most active days. A zoomable timeline marks the moments that matter: first photo, a new device joining the library, your longest gap, your busiest day ever. People and location views count faces and mapped places by country and continent, and a photography profile scores your habits. Clicking any chart value opens the matching photo thumbnails, and reports export as PDF, CSV, or JPG. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Nimbus is a self-hosted homelab dashboard that turns your scattered pile of services into a polished, organized command center with real-time health monitoring for every endpoint you care about. The dashboard displays live status cards for each registered service, tracking response times down to the millisecond and graphing uptime history so you can spot degradation before it becomes an outage. Health checks run on configurable intervals with smart self-signed certificate handling, meaning your internal services with self-issued TLS do not trigger false alarms. Multi-user support comes standard: local accounts authenticate via JWT, while OAuth2 integration with Google, GitHub, and Discord lets team members sign in with existing credentials. Role-based access control and a built-in admin panel give you granular authority over who sees what. Each user personalizes their view with custom backgrounds, light or dark mode, accent color themes, and drag-and-drop service tile arrangement. Services group into named categories and cards resize to fit your preferred layout, with both grid and list view modes available. Prometheus metrics export feeds your existing Grafana stack, and webhook notifications alert you instantly when a service goes offline. Custom service icons upload directly or auto-fetch from the Dashboard Icons collection. Zero-config Docker deployment gets you running in under 30 seconds with a single docker-compose command. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Describe the task in plain words, pick the sources and model it may use, and an agent plans the workflow before running it. That is the core loop: agents build editable visual workflows from a task description, execute them on demand or on a schedule, and keep everything traceable. Prefer building by hand and the canvas offers 17 preconfigured steps, branching, undo and redo, JSON import and export, plus eight starter templates. Feed it real work by importing PDF, DOCX, XLSX, CSV, JSON, and text files, or by connecting folders, HTTP endpoints, and approved local programs. Upload a screen recording and it identifies the actions with timestamps, turning a demonstrated process into an editable workflow you can refine. Model calls go to the endpoint you choose: Ollama, LM Studio, vLLM, or any OpenAI-compatible service, local or cloud with your own credentials. Every run can be inspected step by step, cancelled mid-flight, and exported as JSON, CSV, or Markdown reports. Observations from completed runs land in a knowledge and learnings store, where you review them and promote the useful ones into reusable skills for the next task. The Docker release bundles the application with FFmpeg and local Whisper support, and your documents stay on your own machine. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache License 2.0 licensed.

DailyHub is one calm page for a single person's whole day: today's open work grouped by project, the habits due this morning, and an inbox that catches everything that does not belong anywhere yet. The Today view greets you with a quick-add box, nudges about what is slipping, and a progress bar that fills as the day gets done. Focus mode pins the projects or tasks that matter and hides the rest until a date you pick or until you clear it, so the full list stops shouting. Projects carry status, due dates, and milestones, wear logos with accent colours derived from them automatically, and raise a banner when work stalls. Habits run on weekday schedules and report back with a 14-day consistency strip and a completion rate, so a streak is something you can see rather than guess. Analytics chart completions over time, break them down per project, and surface the weekday patterns that show when you actually get things done. A command palette jumps to any project, task, habit, or milestone from the keyboard, and light and dark themes keep long planning sessions easy on the eyes. An AI assistant can join through the built-in MCP endpoint: ask what is still open in the inbox, add a task to the website project for Friday, or mark today's workout done. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Subarr is the coordination, measurement, and quality layer for Whisper subtitle generation, sitting between Bazarr, Sonarr, Radarr, and subgen to decide what gets transcribed, in what order, and whether the result is any good. Its Coverage walk scans your whole library and scores every subtitle gap with a reason: no track, embedded-only, Bazarr-wanted, audio mislabeled, or low quality. Queue a file, a folder, or an entire series from the Library tab and watch it move through probing, transcribing, and write-back on the dashboard. The Review queue plays you the actual dialogue, picked out by voice-activity detection, so you can verify a subtitle really matches the audio language before it lands. It flags files whose default audio track is not the original language and swaps tracks in place, heading off the double-translation trap. A provider leaderboard records which subtitle sources actually deliver for your library, and the Tuning Lab lets you tune Whisper recipes against your own media. Rules and scheduled walks keep the work flowing, with Tautulli now-playing signals boosting whatever you are about to watch. Finished subtitles are written next to your media, and your Plex or Jellyfin library refreshes the moment one lands. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Most file sharing leaves copies lying around forever; Tessera shares things with a built-in goodbye. Drop in a file, a whole folder, a code snippet, or a link and you get back a short code and a URL that anyone can open until it expires or hits the download count you set, at which point it is deleted. Expiry is checked on every request and each retrieval is counted atomically, so a one-time share cannot be raced by two people at once. Passwords can be required before anything is shown, code arrives syntax-highlighted, and images, SVGs, and diagrams preview in the page, with link cards when you paste the URL into chat. Uploads resume after interruptions and stream through the server without ballooning memory at any size. Behind the scenes you choose where bytes live: local disk, S3-compatible storage, Azure Blob, Google Cloud Storage, or WebDAV, several at once, added or retired from the admin panel without a restart. Accounts are optional for a home server, sign-in through OpenID Connect suits a team, and roles with per-account quotas decide who may upload, view everyone's shares, or change settings. Optional malware scanning, anonymous-upload caps, and rate-limited code lookups keep a public instance honest. A CLI and API tokens drive the same endpoints as the web app, so scripts can share and clean up exactly like people. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Email discussion lists - the venerable listserv pattern where one address relays to a whole group - without the notorious setup pain of Mailman or Sympa: that is Gray Duck Mail. Its architectural trick is requiring no mail server of your own: the C#/ASP.NET Core app monitors a POP3 inbox at any external email host supporting POP3/SMTP and aliasing, relays each incoming message to all list members via SMTP, and archives it for browsing in the web interface. Replies route back to the entire group automatically. The tedious parts of list management are handled by convention: dedicated aliases process join requests, subscription confirmations, and unsubscribes, while a bounce alias in the return-path catches delivery failures so dead addresses get handled instead of silently rotting. The web administration interface creates and removes lists, manages contacts, browses message archives, and imports or exports the local database for backup. GPLv3-licensed, Docker-distributed, and fully code-documented, it targets exactly the groups email still serves best - neighborhoods, schools, congregations, workplaces, and families - where one message keeping everyone in the loop beats yet another app nobody wants to install.

NexusDesk is a self-hosted agent platform whose first complete application turns customer support conversations into retrieved answers, tool calls, and confirmed tickets on your own infrastructure. An agent takes a request, retrieves context from your knowledge base, decides what to do, calls business tools, asks a human to confirm consequential actions, executes, records everything, and feeds evaluation, all as one visible loop rather than a black-box chat. The Harness around that loop is the engineering control layer: it governs permissions and execution boundaries, manages agent memory, routes human handoffs, and keeps an audit trail, so autonomy stays inside lines you drew. You configure, publish, and roll back agents, manage documents, chunks, indexes, and published knowledge versions, and connect Chat, Embedding, Rerank, OCR, and speech models through versioned profiles. Business APIs plug in as tools with their own credentials, parameters, and permissions, and support staff can take over a conversation, draft a ticket from it, and confirm follow-up work without leaving the flow. Channels and application APIs with server-sent events expose the same capabilities to your other systems, while execution records, model and tool call logs, and evaluation results show what the agent actually did. One PostgreSQL handles storage, job queues, and cross-process messaging, and one Compose file starts the stack. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Polaris puts app deploys, file storage, team chat, tasks, and a password vault behind one login on a server you control. Deploy from a Git repository or an image with databases, volumes, environment variables, logs, a terminal, and a domain, published through your own domain, a Cloudflare tunnel, or DuckDNS. Enroll more machines over SSH with one generated command, then watch their containers and metrics and schedule backups with restore. Drive spans local disks, SFTP, S3-compatible storage, SMB, NFS, Google Drive, OneDrive, and Dropbox, with password-protected public links, expiry, and drop points for people without an account. Vault works with the Bitwarden apps and extensions and encrypts in the browser, so the server never sees your master password. Chat brings channels, threads, direct messages, voice and video calls, screen sharing, and a soundboard, while Tasks adds lists, boards, sprints, goals, and time tracking, and can hand work to coding agents over MCP. Calendar syncs both ways with Google, Microsoft 365, and CalDAV and offers booking pages. Game servers run Minecraft, ARK, and FiveM, a firewall blocks countries, networks, and bots, and one-click Marketplace installs add more apps. The interface comes in English and Spanish. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Excaliself turns the Excalidraw canvas into your team's own whiteboard server, where every sketch, diagram, and flowchart lives in your database instead of a vendor's cloud. The home screen works like a file cabinet for drawings: nest them in folders, star the keepers, drag files between spaces, and find anything again by title or by the text inside the drawing. Share a link and teammates edit together in real time with live cursors and follow mode; links can stay members-only or open to guests who have no account at all. A shared Team space sits next to everyone's private space, and one team library holds the shapes and icons the whole group reuses. AI clients can join with a personal access token: Claude Code or Claude Desktop can search your drawings, read what a diagram says, and create new ones from shapes or a Mermaid flowchart. Accounts are invite-only, single sign-on covers Google, Microsoft, and any OIDC provider, and admins manage members, roles, and password resets from Settings. Deleted drawings rest in a trash folder for thirty days before they are purged, and everything auto-saves as you draw. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

BlogFactory is the first open-source agent control plane purpose-built for multi-site content operations, shipping 16 distinct capabilities across four operational pillars — Operate, Grow, Control, and Deliver — in its v0.1.0 release. The platform keeps source evidence, AI-generated drafts, revisions, SEO metadata, human review, preflight checks, and CMS delivery destinations in one workspace while enforcing a server-side authority ceiling that prevents agents from ever publishing live content, accessing credentials, or performing administrative actions. AI agents connect through a Streamable HTTP MCP endpoint with OAuth authentication and site-scoped tool discovery, compatible with Codex, ChatGPT, and any MCP-capable client. Content creation supports single articles from keywords, titles, URLs, PDFs, text, or YouTube sources, batch campaigns, and programmatic content via reusable templates with structured data rows. The Search Growth module connects Google Search Console complete-day data to ranked optimization opportunities, 30-day growth plans, content classification by signal type (growing, low-CTR, almost-ranking, page-two, zero-click), indexing checks, and semantic internal-link suggestions. Brand Voice separates global voice rules, writer profiles, knowledge context, and brand guidelines from article mechanics. Approved drafts are delivered as CMS drafts to WordPress, Ghost, Wix, or Framer through idempotent, optimistic-locking-protected handoffs with explicit destination selection and preflight validation. The stack runs on React/Vite, a Hono/TypeScript API, PostgreSQL, and MinIO via Docker Compose, with providers including OpenRouter, OpenAI, and Google services under a bring-your-own-AI model. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Point the gh CLI at your private Githome server and it works identically to github.com, because every REST v3 and GraphQL v4 endpoint returns byte-for-byte compatible JSON shapes, headers, Link pagination, and ETag caching. A single compiled Go binary serves the REST API under /api/v3, GraphQL under /api/graphql, git smart-HTTP transport, and a server-rendered web UI implementing the GitHub Primer design system with full functionality when JavaScript is disabled. The web interface provides repository browsing with Markdown rendering and syntax highlighting, issue tracking, pull requests with unified diffs and inline code review threads, full-text search, user profiles, and a notifications inbox. Authentication supports personal access tokens with prefix-based identification, OAuth device and web flows, and scoped permissions on every response header with only token hashes stored. The pull request system implements the complete lifecycle including async mergeable state computation, squash, merge, and rebase strategies, commit statuses, check runs, and statusCheckRollup fields. Webhooks deliver events with X-Hub-Signature-256 verification, SSRF protection, and at-least-once retry semantics. Storage supports SQLite for single-node deployments or PostgreSQL for production configurations. Performance optimizations include batch loaders replacing N+1 queries, keyset pagination, FTS-backed search, and GraphQL dataloaders. Docker deployment pulls the official multi-arch container image from GitHub Container Registry. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

PandaDOS is a self-hosted control plane that turns Claude Code and Codex into long-running coding agents you direct through an issue queue from any browser, instead of babysitting a terminal. You file an issue with the outcome and acceptance criteria, and PandaDOS clarifies missing requirements, plans the work, picks the agent, and drives implementation, verification, and delivery in stages. Three approval levels, cautious, balanced, and automatic, decide which actions proceed alone; safe reversible steps continue automatically while destructive, irreversible, production, or secret-related decisions always come back to you. The browser workspace shows the real agent conversation, a native terminal, project files, Git history and diffs, and an execution summary, so you can inspect or intervene at any moment from a phone or laptop. Agents run on local or SSH-connected executor machines inside tmux sessions, and work sharing one repository is serialized while independent projects proceed in parallel without conflicting edits. Modules keep one assigned agent and durable project knowledge, so context from finished issues carries into the next task instead of evaporating when a chat ends. Teams can sign in through Feishu, ask the project manager questions in chat, and receive subscription notifications and approval cards on their phones. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.