InvenTree is an inventory management system for electronics manufacturers, makerspaces, and small-to-medium businesses. The hierarchical part categorization system organizes components into unlimited nested categories, while stock items tracked across cascading locations and sub-locations provide instant visibility into current inventory levels, with optional serial number tracking for individual item traceability and acceptance testing. Intelligent BOM management calculates sub-part requirements, validates availability against current stock, supports multi-format BOM upload including KiCad integration, and generates detailed bills of materials with full database enrichment. Build orders consume BOM-allocated stock to produce assembled parts with step-by-step work order tracking, while purchase orders manage supplier relationships with pricing history, lead times, and automatic stock receipt processing. The modern React frontend built with Mantine, TanStack Query, and Zustand provides responsive data tables, tree-select navigation, a preview drawer, and a snippet editor. The extensible plugin system supports 19 mixin types including BarcodeMixin for scanner integration, LabelPrintingMixin for Zebra and Brother printers, AppMixin for custom database tables, and ScheduleMixin for periodic background tasks. Companion mobile apps on Android and iOS provide barcode scanning and stock operations in the warehouse. Docker Compose deploys with PostgreSQL, MySQL, or MariaDB backends behind any reverse proxy. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

With over 7,500 GitHub stars and 140 contributors, Matterbridge is the Go-powered chat bridge that connects over 20 messaging platforms through a single TOML configuration file, letting teams communicate across platform boundaries without forcing anyone to switch applications. The gateway architecture routes messages bidirectionally between any combination of Discord, Slack, Telegram, Matrix, IRC, Mattermost, Microsoft Teams, XMPP, Rocket.Chat, Nextcloud Talk, Keybase, Mumble, Twitch, WhatsApp, VK, Gitter, Zulip, ssh-chat, and Harmony, with transparent username and avatar spoofing so bridged messages appear native on each platform. Message edits and deletes propagate across bridges, file attachments and inline images transfer between protocols, threading and reply context is preserved where platforms support it, and private group bridging enables confidential cross-platform conversations. Multiple independent gateways can run simultaneously, each bridging different channel sets with different protocol combinations. The REST API enables third-party integrations and custom bridges without modifying the Matterbridge codebase, while the tengo scripting engine allows inline message transformation and filtering. Game chat support bridges Minecraft and Counter-Strike server chat into messaging platforms. Deployment runs as a single static Go binary with zero dependencies, or as the official Docker image with the configuration file mounted as a volume. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

With over 7,100 GitHub stars and 200 contributors since 2016, Mailu has become one of the most popular self-hosted email solutions, delivering a complete production-ready mail server stack as pre-configured Docker containers that eliminate weeks of manual setup. The platform bundles Postfix for SMTP and Submission with auto-configuration profiles for Thunderbird, Outlook, and mobile clients, Dovecot for IMAP and POP3 with full-text search across email attachments, Rspamd for intelligent spam filtering with auto-learn Bayesian classification, greylisting, SPF and DMARC validation, and ClamAV for antivirus scanning of attachments with configurable malicious file blocking. The web administration interface provides global admin controls, per-domain delegation, user quota management, domain aliases, custom routing rules, and announcement capabilities. Users access self-service features including aliases, auto-reply, auto-forward, fetched accounts from external mailboxes via fetchmail, and Sieve filter management through ManageSieve. Security features include enforced TLS on all connections, automatic Let's Encrypt certificate provisioning, outgoing DKIM signing, DANE and MTA-STS support for transport security, and Snuffleupagus PHP hardening for the web interface. The setup wizard at setup.mailu.io generates complete Docker Compose configurations tailored to specific deployment requirements. All components are free and open-source software with zero proprietary dependencies and no tracking. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Arcane gives you a single polished dashboard to manage Docker containers, images, volumes, networks, and Compose projects across unlimited remote hosts. The SvelteKit frontend paired with a Go backend delivers real-time resource monitoring with historical graphs, container lifecycle controls including shell exec and live log streaming, and one-click Docker Compose deployment with Git repository synchronization for version-controlled stack definitions. The manager-agent architecture connects remote environments via Direct TCP on port 3553 or Edge mode where agents initiate outbound gRPC/WebSocket connections through NAT and firewalls without requiring inbound ports, all secured with mTLS certificates. Vulnerability scanning identifies security issues in running container images directly from the interface. The backup system enables scheduled container snapshots with configurable retention for disaster recovery. Network and volume administration includes visual relationship mapping between services, and the responsive interface supports dark/light themes with full mobile optimization and community-driven internationalization via Crowdin. 6,500+ stars and 89 releases since April 2025 reflect a rapid development cadence. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-3-Clause licensed.

Instead of deploying proprietary background agents across dozens of target nodes, engineers rely on Apache HertzBeat to monitor real-time infrastructure health, metrics gathering, threshold alerting, and public status pages from a central operations platform. Operations teams can poll hundreds of target services without deploying proprietary background daemons, gathering performance data across Linux hosts, Kubernetes clusters, SQL databases, and network switches using native connection protocols. Engineers can define custom monitoring targets directly within the web dashboard by composing declarative YAML templates that specify polling intervals, parsing expressions, and metric extraction rules. The centralized alert engine processes inbound threshold events, suppresses cascading alert storms during maintenance windows, and dispatches actionable incident notifications to Discord channels, Slack rooms, Telegram groups, and webhook endpoints. Telemetry streams flow into interactive charts with customizable refresh cadences, enabling site reliability engineers to inspect latency waterfalls, correlate log spikes against CPU exhaustion, and track disk capacity trends over extended timeframes. Administrators can also publish real-time public status pages that inform external stakeholders about service availability, scheduled downtime, and ongoing incident resolutions. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

With over 7,000 GitHub stars and active community maintenance through version 0.26.0 released in June 2026, Homebox fills the gap between inadequate spreadsheets and overcomplicated enterprise asset management by providing a purpose-built inventory system designed specifically for home users, families, and small groups. The Go backend with SQLite storage deploys as a single Docker container consuming under 50MB of RAM at idle, running on hardware as modest as a Raspberry Pi while the responsive web interface adapts seamlessly across desktops, tablets, and smartphones. The entity-based architecture introduced in v0.26 unifies items and locations into a shared structure supporting custom fields, attachments, entity types, and reusable templates for consistent data entry across inventory categories. QR code generation creates printable labels that scan with any smartphone camera to instantly display item details, photos, serial numbers, and associated documents. Warranty tracking records purchase dates, prices, and expiration dates while maintenance scheduling sends reminders for recurring service tasks. Location hierarchies organize items spatially with nested sub-locations, and flexible label tagging enables cross-cutting categorization beyond physical placement. Multi-user support shares collections with family members or roommates with OIDC single sign-on integration for Active Directory, Okta, and other identity providers. CSV import and export handles bulk operations, while the full REST API enables automation and third-party integrations. Collection-level ZIP export packages complete inventories with attachments for backup or migration. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

The Kubernetes project's own answer to cluster management UIs: maintained under SIG UI governance, Headlamp's roadmap tracks Kubernetes releases and its design philosophy reflects community needs rather than a vendor's product strategy. The React interface provides full read-write capabilities adapted to each user's RBAC permissions — delete, scale, edit, and restart buttons appear only when the authenticated user holds the corresponding cluster role, preventing accidental unauthorized actions. Multi-cluster support surfaces workloads across development, staging, and production from a single view without context switching. The plugin architecture drives extensibility through a curated catalog: an AI Assistant plugin answers natural-language cluster queries and performs operations via configurable LLM keys, Flux handles GitOps, Karpenter manages nodes. Integrated terminals provide browser-based exec access to running pods, live log streaming follows container output with filtering, and the YAML editor displays inline Kubernetes API documentation alongside resource definitions. Deployment creation forms let you configure containers, environment variables, volumes, and replicas without writing manifests. Side-by-side cluster comparison views surface differences in workload distribution. Works with any distribution: EKS, GKE, AKS, Minikube, Docker Desktop. Helm chart installation via the Headlamp repository with images on GitHub Container Registry. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

A status page and uptime monitor in one Go binary: Statping-ng - the actively maintained fork of Statping - replaces the UptimeRobot-plus-Statuspage combo with a ~20 MB Docker image using under 50 MB of RAM. It checks services over HTTP, TCP, UDP, ICMP ping, and gRPC health checks on configurable intervals, with per-service timeouts, expected status codes, POST requests with custom JSON bodies, SSL verification, and failure thresholds before alerting. The public status page is the differentiator against plain monitors: visitors see live status, uptime percentages, and latency charts grouped into service categories, with incident announcements and scheduled-maintenance messages you publish from the dashboard - and Sass-based custom styling matches the page to your brand rather than a vendor template. When something fails, notifiers fire immediately: Slack, Discord, Telegram, SMTP email, PagerDuty, Twilio SMS, Pushover, and custom webhooks, each testable before saving. Because notifiers are single Go files, the plugin system makes new channels straightforward. A RESTful API manages services and reads uptime data programmatically, and the free Statping mobile app connects to your server via QR code for on-the-go monitoring. Data persists to SQLite, MySQL, or PostgreSQL. Point it at internal services too - anything the container can reach is monitorable.

With over 7,000 GitHub stars and continuous development since 2017 by former Intel engineer Ylian Saint-Hilaire, MeshCentral has become the go-to self-hosted alternative to ConnectWise Control and Splashtop for managing devices remotely without per-seat licensing fees. The Node.js server installs via a single npm command and manages Windows, macOS, Linux, and FreeBSD endpoints through lightweight agents that maintain persistent WebSocket connections for real-time remote desktop, terminal access, and file transfer directly in the browser. Intel AMT integration provides out-of-band hardware management including power control and BIOS access even when the operating system is unresponsive. Device groups organize endpoints by location, customer, or function with granular role-based access control for multi-technician environments. Session recording captures remote desktop interactions for compliance auditing, while Wake-on-LAN powers on machines remotely across subnets. The server supports MongoDB for production deployments handling thousands of agents or the embedded NeDB for smaller setups under 200 devices, with a single 8GB VPS comfortably managing 1,500 concurrent agents. Security features include mandatory TLS with automatic Let's Encrypt certificate provisioning, multi-factor authentication via TOTP and FIDO2, SAML-based single sign-on, IP filtering, and HashiCorp Vault integration for secrets management. The web console provides real-time device monitoring with hardware and software inventory, network topology visualization, and customizable branding. TacticalRMM uses MeshCentral as its remote access layer. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Configure each indexer once, not five times: Prowlarr is the indexer hub of the *arr stack, removing the most tedious duplication in a media automation setup. Instead of configuring the same torrent trackers and Usenet indexers separately in Sonarr, Radarr, Lidarr, Readarr, and Mylar3, you add each one once in Prowlarr and it syncs them to every connected app automatically, complete with category mappings; with Full Sync enabled, adding or removing an indexer propagates everywhere, and a tracker URL change is a one-place fix. Coverage is the deepest available: 500+ torrent trackers with definitions added constantly, 24 native Usenet indexers, generic Newznab and Torznab support for anything else, and custom Cardigann YML definitions with JSON and XML parsing for obscure sources. Built on the same .NET/React base as its siblings, it also earns a place as a search tool in its own right: unified manual search queries every indexer simultaneously at a category level, and you can push multiple releases straight to your download clients without touching Sonarr or Radarr. Health checks and status notifications flag failing indexers, per-indexer statistics track success rates and response times so you can cull unreliable sources, and per-indexer proxy support (SOCKS4/5, HTTP, FlareSolverr) handles trackers behind Cloudflare.

A single pane of glass for every service you run, arranged by drag-and-drop with no YAML or JSON files: Homarr is the modern dashboard for self-hosted infrastructure. Its grid system arranges apps, widgets, and bookmarks on desktop or touch, backed by an icon picker with over 11,000 icons. What separates Homarr from static launchers is 50+ live integrations: Plex, Jellyfin, and Emby media stats, the *arr suite (Sonarr, Radarr) with a unified release calendar, download clients, Pi-hole and AdGuard Home controls, Proxmox, Home Assistant, OPNsense, and Unifi monitoring. Widgets update in real time over WebSockets (tRPC and Redis under the hood), and a built-in search queries thousands of data points across connected services. Custom widgets extend the reach to any HTTP API without code: define endpoint, auth, and refresh interval in the management UI, then render responses as stat grids, tables, progress bars, status indicators, action buttons, or full custom JSX layouts - with an AI-prompt helper for generating templates. Multi-user support is first-class: credentials, OIDC, or LDAP sign-on, groups with granular permissions, and secrets encrypted with AES-256-CBC. A robust background-job system scales it from a Raspberry Pi homelab to deployments serving hundreds of users.

Two decades of continuous development made Roundcube the standard-bearer of open-source webmail - a PHP IMAP client that gives any mail server a polished, application-like interface in the browser. It connects to whatever IMAP/SMTP stack you run - Dovecot, Postfix, a hosted mailbox - and delivers the full desktop-client experience: drag-and-drop message management, threaded conversation views, full MIME and HTML mail handling, find-as-you-type address book with groups and LDAP connectors, multiple sender identities, full-text search, and spell checking in dozens of languages. The default Elastic skin is genuinely responsive, working as well on a phone as a desktop, and the entire UI is skinnable. The plugin API is where deployments get shaped: managesieve exposes server-side filter management in the UI, enigma brings PGP encryption and signing via GnuPG, markasjunk trains spam filters, zipdownload batches attachments, password lets users change credentials, and attachment_reminder catches the classic forgotten-attachment email - among hundreds of community plugins. Built-in caching keeps large mailboxes fast, IMAP ACLs and shared folders support team setups, and XSS protection is engineered into the rendering pipeline. It scales from a single personal mailbox to unlimited users, backed by MySQL, MariaDB, PostgreSQL, or SQLite. GPL-licensed with regular security releases.

big-AGI is an open-source generative AI workspace that provides a unified, local-first interface for orchestrating multi-model reasoning, automated code execution, and custom persona workflows across private infrastructure. Users query multiple large language models simultaneously through the Beam scatter-gather engine, which prompts independent AI systems in parallel, compares candidate completions side by side, and merges optimal passages into a single refined response. Knowledge workers assemble tailored AI personas equipped with specialized system instructions, custom temperature settings, and predefined document context to handle domain-specific tasks ranging from architectural design reviews to legal contract analysis. The application renders rich multimedia outputs including interactive Mermaid sequence diagrams, LaTeX mathematical formulas, syntax-highlighted code blocks with live execution previews, and AI-generated image generation canvases. Teams integrate local inference servers like Ollama and LocalAI alongside commercial API endpoints to route confidential datasets strictly through internal networks while monitoring per-prompt token usage and operational latency. Users attach complex PDF documents, spreadsheets, and source code repositories for automatic parsing and semantic retrieval, while local-first storage engines ensure private chat transcripts and custom presets remain encrypted on host drives. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

With nearly 7,000 GitHub stars and instances spanning hundreds of federated servers, Pixelfed has become the leading open-source alternative to Instagram — delivering ad-free, algorithm-free photo sharing across the Fediverse. Built on Laravel with a Vue.js frontend, Pixelfed provides a polished, mobile-responsive interface where users upload photos and videos, apply built-in filters, create multi-image posts with alt text, share ephemeral stories, organize content into curated collections, and exchange direct messages — all without tracking, algorithmic manipulation, or targeted advertising. Federation through the ActivityPub protocol means Mastodon, Pleroma, and other Fediverse users can follow Pixelfed accounts, view photo posts in their timelines, and interact through likes, boosts, and replies, while Pixelfed users can discover content through both local and federated timelines. Instance administrators control registration policies, content moderation rules, federation blocklists and allowlists, storage backends including local or S3-compatible options, and server-wide settings. The Mastodon-compatible API enables third-party mobile app support alongside the built-in Progressive Web App experience. Advanced features include blurhash image placeholders for smooth loading, federated groups for community building through FEP-400e and FEP-1b12 extensions, HTTP Signatures with Authorized Fetch for secure federation, and comprehensive data export for full portability. Deployment requires PHP 8.1+, MySQL or PostgreSQL, Redis, and a reverse proxy, with Docker Compose configurations available for streamlined setup. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Claiming 60-80% token cost reduction compared to flat single-model deployments and backed by 6,500+ GitHub stars, OpenSquilla delivers an intelligent AI agent runtime where a local ML classifier evaluates every turn on message length, code blocks, keyword patterns, and semantic embeddings before routing it to the optimal model tier from C0 through C3. The pluggable provider layer connects natively to TokenRhythm, OpenRouter, OpenAI, Anthropic, Ollama, DeepSeek, Gemini, DashScope, Moonshot, Mistral, Groq, Zhipu, SiliconFlow, vLLM, LM Studio, and additional compatible backends with primary-plus-fallback selection. The four-tier cognitive memory architecture spans working, episodic, semantic, and raw layers with vector-semantic and BM25 retrieval powered by on-device ONNX embeddings that never leave your infrastructure. Security isolation operates at the syscall level via Bubblewrap on Linux and Seatbelt on macOS, complemented by policy-based execution controls and prompt injection protections. The unified TurnRunner executes identically across the Vue-based control console Web UI, terminal CLI, and chat channel integrations including Slack and Discord, ensuring consistent tool dispatch, retry logic, and decision logging regardless of entry point. Built-in skills cover deep research, multi-search-engine queries, document generation for DOCX, PPTX, XLSX, and PDF formats, GitHub integration, cron scheduling, and bounded subagent delegation. Per-agent workspaces with durable session storage provide transcript replay, context state management, and per-call cost tracking with automatic quota enforcement. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

With 6,700 GitHub stars, 79 releases, and 40 contributors since its October 2023 launch, OpenSign delivers a fully free electronic signature platform that removes the per-envelope pricing and seat limits of commercial e-signing services. The React-based frontend provides a drag-and-drop interface for placing signature fields, initials, date stamps, text inputs, and checkboxes onto PDF documents, while the Parse Server backend built on Node.js handles document routing through configurable multi-signer workflows with sequential or parallel signing order. Guest signers authenticate via one-time-password email verification without requiring account creation, while registered users manage documents through OpenSign Drive — a centralized vault with folder organization and status tracking across draft, in-progress, completed, and declined states. Every signing action generates tamper-proof audit trails logging timestamps, IP addresses, email addresses, and phone numbers, culminating in a detailed completion certificate attached to the finished document. The REST API v1.2 exposes endpoints for document creation, template dispatch, self-signing, and real-time webhook notifications on document lifecycle events, with regional deployments available in US and EU. PDF templates with pre-placed widgets enable repeated dispatch to different signers in a single API call. Custom branding controls email invitation templates, signing page appearance, and completion certificate styling. Deploy via Docker Compose with MongoDB, Caddy reverse proxy, and automatic HTTPS provisioning. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3 licensed.

Known as the open-source Mixpanel alternative that respects user privacy, OpenPanel delivers a unified web and product analytics platform combining Mixpanel's behavioral analysis with the simplicity of Plausible and full data ownership through self-hosting. Cookieless tracking eliminates consent banners entirely while still capturing events, page views, sessions, user journeys, funnels, retention cohorts, and custom properties with full GDPR compliance by design. The 2.3 KB async script loads without blocking page rendering, and 16 official SDKs cover Next.js, React, Vue, Astro, Remix, Nuxt, Angular, Svelte, React Native, Swift, Kotlin, Python, PHP, Laravel, Express, and REST API for custom integrations. Real-time dashboards display live visitor counts, active sessions, and event streams as they happen. Custom chart builders create tailored visualizations from any tracked event with breakdowns by property, time period, and user segment. Session replay reconstructs individual user journeys showing every page visited, event triggered, and interaction recorded. Funnel analysis identifies conversion drop-offs with step-by-step breakdown and property filtering. Retention analysis measures how often users return with customizable time windows and cohort comparisons. A/B testing and variant tracking enable experiment measurement directly within the platform. Event notifications alert when specific events occur or thresholds are crossed. The self-hosted deployment uses Docker Compose with ClickHouse for high-speed analytical queries, PostgreSQL for metadata, and Redis for real-time processing — deployable on any VPS or Kubernetes cluster. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

With 6,800 GitHub stars and over a decade of development since its 2014 release, ONLYOFFICE Docs delivers a self-hosted Microsoft Office replacement with pixel-perfect OOXML rendering and real-time collaborative editing supporting both Fast (character-by-character) and Strict (manual save) co-authoring modes. The suite encompasses five full-featured editors — Document Editor for DOCX/ODT/EPUB/HTML, Spreadsheet Editor with 500+ functions and pivot tables, Presentation Editor with animations and transitions, Form Creator for fillable PDF forms with field validation, and PDF Editor for annotation and conversion — all operating within a unified web interface. Format support spans 50+ types including DOCX, XLSX, PPTX, ODT, ODS, ODP, PDF, CSV, RTF, TXT, and Markdown with server-side conversion between any supported pair. The JavaScript plugin API enables extending editor functionality through a marketplace of ready-made plugins for ChatGPT integration, speech-to-text, OCR, Zotero citations, and Thesaurus. Ready-to-use connectors integrate with Nextcloud, ownCloud, Seafile, Moodle, Odoo, Confluence, SharePoint, Alfresco, Liferay, and Chamilo, while WOPI protocol compliance enables integration with any WOPI-compatible platform. JWT authentication secures all API communications between host applications and the document server. Deploy via Docker with a single command or DEB/RPM packages on Ubuntu, Debian, CentOS, or RHEL. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GNU AGPL v3 licensed.