Quote to cash in one web application - create quotes, convert them to invoices, record payments, track customers: iDURAR is an open-source ERP and CRM platform for small and medium-sized businesses. Built on the MERN stack (MongoDB, Express, React, Node.js) with Ant Design components and Redux state management, it presents a clean SaaS-style interface that needs little onboarding. Core modules cover invoice management with PDF generation and email delivery, payment recording against invoices, quote and proforma handling, customer records, and accounting views over the resulting data. Multi-currency support and localization make it usable for internationally operating teams. Because the whole stack is JavaScript with an API-first backend, extending it - custom fields, new modules, integrations - is approachable for any Node/React developer rather than requiring a specialist ERP skill set. Deployment is straightforward via Docker with a MongoDB instance. Licensed under AGPL-3.0 with free commercial use; a hosted enterprise version exists but the self-hosted edition is fully functional.

Put one governed doorway in front of every service you run: Apache ShenYu is an API gateway that proxies, secures, and manages traffic for HTTP, Dubbo, gRPC, WebSocket, and MQTT backends from a single entry point. Every request flows through an ordered, hot-pluggable plugin chain, so you compose exactly the behavior each route needs instead of accepting a fixed gateway feature set. Selectors give you coarse, service-level routing and rules refine it down to individual methods, matched against headers, paths, and parameters. Authentication and edge security come from JWT, OAuth 2.0, request-signing, and WAF plugins, while rate limiting, circuit breaking, and load balancing protect fragile upstreams from traffic spikes. You reshape calls in flight with request, response, and parameter mapping, and convert protocols so a gRPC or Dubbo service answers ordinary HTTP clients. Newer releases add AI gateway plugins that proxy LLM calls with prompt processing, token limits, and sensitive-word filtering, plus an MCP server plugin for exposing tools to AI agents. The ShenYu Admin console on its own port manages plugins, selectors, rules, users, and permissions, then pushes changes live to every gateway replica over WebSocket, ZooKeeper, Nacos, etcd, or HTTP long polling. Metrics, tracing, and logging plugins stream operational data to Kafka or Elasticsearch, and client SDKs for Java, Go, Python, and .NET let services register themselves automatically. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Backed by 8,700+ GitHub stars and designed as a modern alternative to Apache Airflow, Mage delivers the open-source data pipeline platform that combines the interactive flexibility of notebooks with production-grade orchestration in a single self-hosted environment accessible at port 6789. The modular block architecture lets data engineers compose pipelines from Python, SQL, and R code blocks with instant data previews, live execution logs, and visual debugging at each step. Over 100 prebuilt integrations connect sources and destinations including PostgreSQL, MySQL, Snowflake, BigQuery, Redshift, S3, Kafka, MongoDB, Amplitude, Salesforce, and Stripe with parallel stream synchronization for high-throughput data movement. Batch pipelines run on cron schedules or event triggers while streaming pipelines process real-time data from Kafka, Kinesis, and RabbitMQ with stream mode reducing memory usage by approximately 90 percent compared to batch processing. Native dbt integration builds, tests, and runs dbt models directly inside the pipeline editor alongside custom transformation blocks. Spark, Snowpark, and Databricks runtimes handle large-scale distributed processing. AI-assisted development generates code, fixes errors, and optimizes queries within the notebook interface. Monitoring dashboards track pipeline health with integrations to Datadog, Prometheus, New Relic, and OpenTelemetry. Terraform templates deploy production environments to AWS, GCP, or Azure with two commands, while Helm charts support Kubernetes clusters. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

The project that proved organizations could have Dropbox-style convenience with complete data ownership: ownCloud is the original open-source file sync and share platform - the codebase Nextcloud later forked from. This deployment runs the classic ownCloud Server (PHP over PostgreSQL or MariaDB, with Redis caching), the battle-tested edition trusted across enterprises, universities, and public institutions worldwide. The core loop: store files on your server, sync them via desktop clients for Windows, macOS, and Linux plus iOS and Android apps, and access everything through the web interface or standard WebDAV. Sharing is granular - internal users and groups, external recipients via public links with passwords and expiration dates, and federated sharing that connects separate ownCloud instances into one network. Security controls include file firewall rules, multi-factor authentication, encryption, and detailed audit-friendly lifecycle management with versioning and trash-bin recovery. An app marketplace extends the platform, and Web Office integrations bring collaborative document editing through Collabora Online, OnlyOffice, or Microsoft Office Online directly into your files. LDAP and Active Directory integration slots it into existing identity infrastructure. For teams that need a proven, self-hosted alternative to Dropbox or Google Drive - where compliance demands knowing exactly which disk your data sits on - ownCloud remains a foundational choice.

SuperPlane is an open-source engineering automation platform that turns routine backlog tickets into verified, review-ready pull requests while orchestrating complex multi-system workflows across your developer tools. Engineers use the visual infinite canvas to assemble event-driven pipelines with trigger nodes, conditional routing, loops, and human-in-the-loop approval gates. You can delegate pull request code reviews, automated QA testing, documentation generation, and release management to coding agents operating within strictly defined policy boundaries. Custom operational consoles let teams build live monitoring dashboards displaying key delivery metrics, active incident states, and execution histories from connected tools. Integrations connect natively with GitHub, GitLab, Datadog, PagerDuty, Slack, AWS, and leading AI models through webhook events and bi-directional actions. Every automation run maintains durable state persistence across process restarts, ensuring failed steps resume with full input payloads and debugging context intact. Developers can define reusable work orders, configure canvas memory for long-term state retention, and execute fleet commands over SSH or containerized runners. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Track every recurring payment you have, from streaming services to SaaS tools, and get AI-powered recommendations on where to cut costs. Wallos manages subscriptions with automatic due date reminders delivered through email, Discord, Telegram, Pushover, Gotify, or custom webhooks so renewal charges never catch you off guard. Multi-currency support handles international subscriptions while the Fixer API converts everything to your primary currency for unified budget visibility. The statistics dashboard breaks down monthly and yearly spending by customizable categories, revealing consumption patterns and highlighting savings opportunities. AI analysis via ChatGPT, Gemini, or a locally-hosted Ollama instance reviews your subscription portfolio and suggests alternatives or consolidation strategies. Logo search automatically fetches brand imagery so your subscription list stays visually organized without manual uploads. Authentication supports OIDC with OAuth for enterprise environments, and the mobile-responsive interface works on any device with customizable themes and multi-language support. The PHP 8.3 application with SQLite backend runs from a single Docker container (bellamy/wallos image) with two persistent volumes for database and logos on port 8282. Deploy on RepoCloud with a dedicated VPS, keeping all financial data private under the GPL-3.0 license.

PrivateBin shares text and files with true zero-knowledge encryption: the server stores only ciphertext it cannot decrypt because the key exists exclusively in the URL fragment that never reaches the server. With over 8,400 GitHub stars and 500,000+ Docker pulls, it has become the standard for privacy-respecting paste sharing where not even the hosting operator can read stored content. All encryption uses 256-bit AES in Galois Counter mode performed entirely client-side in the browser. Burn-after-reading mode destroys pastes on first view, while configurable expiration timers automatically purge content after periods ranging from five minutes to forever. Optional password protection adds a second encryption layer requiring recipients to enter a passphrase before decryption occurs. Discussion threads enable anonymous or nickname-based commenting on pastes with IP-based identicon avatars for visual identity. Markdown rendering with live preview formats pastes as styled HTML, and syntax highlighting through prettify.js supports dozens of programming languages across four color themes. File upload support enables sharing images, PDFs, and media files with in-browser preview. QR code generation converts paste URLs for mobile device transfer. Customizable templates include Bootstrap 5, classic Bootstrap CSS, and Darkstrap themes. Storage backends support filesystem, MySQL, PostgreSQL, SQLite, Amazon S3, and Google Cloud Storage. Deploy via Docker with the privatebin/nginx-fpm-alpine image on port 8080. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. zlib licensed.

The deep end of self-hosted recipe management: Tandoor Recipes is a Django/Vue application that replaces Paprika, AnyList, and ad-choked recipe sites with a database you control. Import is where most people start: paste any URL and Tandoor scrapes schema.org markup for ingredients, instructions, images, times, and nutrition; bulk-paste URLs for batch import; or migrate wholesale from Mealie, Paprika, Nextcloud Cookbook, Pepperplate, and other managers with built-in importers. The structured recipe editor tracks ingredients individually, which is what powers everything downstream: full-text search with trigram similarity, a "what can I make with what's in the fridge" ingredient search, automatic nutrition via OpenFoodFacts, and shopping lists that merge duplicate ingredients across recipes, convert units, scale by servings, and sort by your supermarket's actual aisle layout. The weekly meal planner is drag-and-drop, feeds shopping lists automatically, exports to your calendar, and shows a nutritional summary for the week. Multi-user support comes with a granular permission system - shared household cookbooks, private recipes, even secret ones - and shopping lists sync in real time so two people can shop simultaneously. A full REST API integrates with Home Assistant and Grocy. For households serious about cooking, Tandoor's depth is unmatched.

The entire wiki - content, code, and interface - is built from "tiddlers," small addressable units of information that link, transclude, tag, and filter into each other: TiddlyWiki is a non-linear personal notebook with a design philosophy unlike anything else in this catalog. Instead of pages in a hierarchy, you compose views by pulling tiddlers together on demand, which is why researchers, zettelkasten practitioners, and GTD devotees have sworn by it for two decades. The whole application is JavaScript, and the UI itself is written in hackable WikiText - customization goes as deep as rewriting the interface from inside the wiki. Self-hosting runs the Node.js version, which upgrades the classic single-HTML-file architecture in the ways that matter for a server: every tiddler is stored as an individual text file (Git-friendly, organizable), edits save through the HTTP API from any modern browser including phones, and one installation can serve multiple wikis blending shared and unique content. The plugin ecosystem covers graph visualizations, themes, languages, and hundreds of community extensions, declared per-wiki in a simple tiddlywiki.info file; the newer MultiWikiServer plugin adds multi-user accounts and tiddler sharing. Your notes stay usable for decades, independent of any corporation - the project's founding promise. BSD-licensed.

Ever Gauzy consolidates ERP invoicing, CRM sales pipelines, HRM employee records, applicant tracking, and project management into one full-stack TypeScript platform, eliminating the need to stitch together five separate SaaS subscriptions. Over 4,300 GitHub stars and 3,800+ releases back a CQRS architecture that separates command and query responsibilities across modules for invoices, expenses, payments, inventory, contacts, leads, deals, employee onboarding, candidate interviews, hiring workflows, sprints, goals, and KPI tracking. Time tracking captures hours via web timer, Electron desktop timer with activity monitoring and automatic screenshot capture, or browser extension, with timesheet submission and approval workflows supporting billable hour classification across Hubstaff and Upwork integrations. The multi-tenant architecture provides automatic tenant scoping with role-based permissions, while dual ORM support through TypeORM and MikroORM with Knex query builder ensures database flexibility across PostgreSQL, MySQL, and MariaDB. REST APIs documented with OpenAPI and Swagger expose every module for headless operation, complemented by an MCP server offering 323 tools for AI assistant integration. The Angular 19 dashboard provides dark, light, corporate, and material themes with i18n across 10 languages via Crowdin. Supports Docker, Kubernetes, Terraform, and Pulumi deployment with Redis caching and OpenSearch full-text indexing. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

The first open-source substrate for enterprise knowledge engineering that learns passively and governs itself. The Rust-built backend paired with PostgreSQL and pgvector delivers a bitemporal knowledge graph where every fact carries two timelines: when it held in the real world and when the system came to believe it — enabling full audit trail replay of how understanding evolved. Document ingestion handles PDF, DOCX, PPTX, XLSX, CSV, Markdown, HTML, and plain text with legacy encoding detection, while scheduled syncing pulls from web pages, RSS feeds, GitHub, Jira, Notion, WebDAV, and S3-compatible buckets. Search fuses Tantivy full-text indexing with pgvector semantic vectors using Reciprocal Rank Fusion, streaming answers with inline citations that link directly to source passages. The built-in agent harness drives agentic RAG through conversation — searching documents, walking the knowledge graph at any historical date, and querying mounted databases via Ontology2SQL which achieves state-of-the-art results on BIRD Mini-Dev benchmarks. Five ontology packs ship inside the binary (schema.org, W3C Org, PROV-O, FOAF, IOF Core) with forward-chaining reasoning for transitivity, symmetry, inverses, and relation hierarchy. Entity resolution operates in three stages: exact name matching, embedding similarity, then model-based judgment with every merge reversible. Any OpenAI-compatible endpoint works including DeepSeek, Qwen, Ollama, and vLLM for fully air-gapped deployment. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Used by over 3,000 organizations including Dropbox, Khan Academy, Sony, Pepsi, Wikipedia, and Mistral, GrowthBook is the open-source experimentation platform that handles over 100 billion feature flag evaluations daily across its cloud and self-hosted deployments. Feature flags support advanced targeting with user attributes, gradual percentage rollouts, prerequisite dependencies, and scheduled launches, with both client and server SDKs evaluating flags locally from a cached payload for sub-millisecond performance with zero network calls per check. The warehouse-native architecture queries experiment results directly from 11 data sources including BigQuery, Snowflake, Databricks, Redshift, ClickHouse, Mixpanel, and PostgreSQL, eliminating duplicate data pipelines. The statistics engine implements CUPED variance reduction, sequential testing, Bayesian analysis, post-stratification, multi-armed bandits, and sample ratio mismatch checks with fully open-source methodology. Product analytics provides dashboards with funnels, retention cohorts, and event-based tracking shareable across teams. Twenty-four SDKs cover React, Next.js, Node.js, Python, Go, Ruby, PHP, Java/Kotlin, Swift, C#/.NET, Rust, Elixir, Angular, and edge runtimes including Cloudflare Workers, Fastly Compute, and Lambda@Edge. The MCP server and REST API enable AI coding agents to create features, start experiments, and manage stale flags programmatically. Self-hosting deploys via Docker Compose with MongoDB, or via Helm charts on Kubernetes, with the same codebase powering both open-source and managed cloud offerings. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

One install, many shops: Sylius runs separate storefronts with their own languages, currencies, and countries from a single admin panel. Products are simple or configurable. Define a size option, generate variants from S through XXL, and track stock per variant. Attributes, translations, and a nested taxon tree keep the catalog organized. Prices are set per channel. Catalog promotions add sale badges and struck-through prices. Cart promotions pair rules, like a minimum item total, with actions, like a fixed order discount, optionally behind coupon codes. Shipping methods carry delivery windows, zone eligibility, and shipping and tax categories. Order pages show items, shipping, taxes, promotions, payment state, and customer details. The dashboard charts sales and paid orders over time and lists pending work. A ready-made storefront covers product pages, a cart, checkout with address, shipping, payment, and review steps, customer accounts with order history, and product reviews. Custom frontends talk to separate shop and admin REST APIs, documented in OpenAPI. Every enabled locale adds a translation section to products, taxons, shipping methods, and promotions. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Vendure is a headless ecommerce framework where TypeScript plugins extend every aspect of commerce without forking the core, backed by 8,200+ GitHub stars and powering stores processing over 10,000 daily transactions. Two distinct GraphQL APIs serve different audiences: the Shop API powers storefronts while the Admin API handles back-office operations, both introspectable and type-safe through Apollo Server. NestJS modules with Vendure decorators inject services, modify schemas, subscribe to events, and add dashboard components, making extensibility a first-class concern rather than an afterthought. The React admin dashboard built with TailwindCSS and Shadcn UI provides order fulfillment workflows, catalog management, tiered pricing, dynamic promotion rules with side-effect hooks for free gift injection, and role-based access control across 14+ languages. Multi-channel support runs D2C, B2B, marketplace, and omnichannel from a single instance with channel-specific products, pricing, currencies, sellers, and permissions. Asset management handles images, videos, and documents with pluggable backends including AWS S3 and Minio, plus built-in image transformation via the AssetServerPlugin. Custom fields propagate automatically into GraphQL schemas and admin forms on every core entity. A dedicated worker process handles search indexing, email dispatch, and integration jobs with independent horizontal scaling. Deploys on PostgreSQL, MySQL, or MariaDB. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPLv3 licensed.

To protect self-hosted web services behind a unified single sign-on portal without deploying complex enterprise identity suites, Tinyauth acts as an OpenID Certified authentication server and reverse proxy middleware. Homelab operators and infrastructure teams place it in front of internal dashboards, media servers, and administrative tools routed through Traefik, Caddy, Nginx, Nginx Proxy Manager, or LinuxServer SWAG. Users can sign in with local bcrypt-hashed credentials, scan QR codes to enroll time-based one-time password authenticators for two-factor verification, or authenticate through external OAuth providers like GitHub, Google, and Pocket ID. Organizations running centralized directories can bind Tinyauth directly to an LDAP server such as LLDAP or OpenLDAP and automatically synchronize group memberships for role-based authorization. Fine-grained access control rules configured via dynamic Docker container labels or environment variables let administrators whitelist or block specific usernames, OAuth email regex patterns, OIDC groups, client IP CIDR ranges, and URL path prefixes per subdomain. For applications that support native federated login, the built-in OpenID Connect 1.0 discovery endpoint, authorization code flow, and userinfo API allow seamless single sign-on with optional consent skipping for trusted clients. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

One server, a login for everyone, and a private JupyterLab in every browser tab: that is the whole pitch, and for classrooms and research teams it is transformative. JupyterHub authenticates each user against your existing identity system (campus OAuth, GitHub, Google, LDAP, or local accounts), then spawns a dedicated single-user server just for them, with their files, their kernels, and their compute allocation. Users open notebooks, terminals, and extensions in JupyterLab without installing anything, and their environment is identical whether they log in from a lab workstation or a laptop at home. The Spawner decides where those servers live: plain processes on one machine for a small class, Docker containers for isolation, or Kubernetes pods that scale across a cluster for a whole university. Administrators manage users, groups, and named servers from the admin panel, grant precise permissions through roles and scopes, and watch start times and profiles for every running server. External services plug into the Hub API, so dashboards, autograders, and portals can authenticate through the same OAuth machinery. When a user disappears for the semester break, culling stops their idle server and frees the resources. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-3-Clause licensed.

Network traffic stops being a mystery once ntopng names the hosts, applications, and protocols behind every flow, live in your browser. To find the host saturating an uplink, open the dashboard, which ranks top talkers, countries, autonomous systems, and protocols beside historical charts. To see what a suspicious host is contacting, open its page for traffic, ports, DNS queries, TLS details, and visited sites, plus a map of its conversations. Deep packet inspection recognizes applications such as Facebook, YouTube, and BitTorrent, so charts name the app behind the bytes instead of relying on port numbers alone. The console reads packets from a SPAN port or TAP and NetFlow, sFlow, or IPFIX records from routers and switches through nProbe, so it can cover a single switch or many remote sites. Behavioural checks raise alerts for flows, hosts, and interfaces and send them to email, Discord, Telegram, or webhooks. Active monitoring probes remote hosts over ICMP and HTTP/S, and network discovery lists the devices on your local network. A REST API and Lua scripting pull statistics into your own tools and add custom checks. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

An online store you own end to end: OpenCart bundles the storefront, product catalog, checkout, and admin panel into one self-hosted install with no monthly software fee. Products take options and attributes, and master products can spawn variants that override price, SKU, and stock level. Unlimited categories, filters, reviews and ratings, coupons, specials, and reward points help shoppers find items and return for more. Guests and registered customers can check out by bank transfer, cheque or money order, or cash on delivery; subscription plans with trial periods handle recurring orders, and more gateways and carriers install from the extension marketplace. Shipping rules include flat-rate, free, per-item, pickup, and weight-based options. Tax classes, geo zones, and multiple currencies with automatic rate updates support selling abroad. One admin interface manages several stores, each with its own theme, layout, and language settings, and user groups control who may edit what. A built-in blog adds topics, articles, and comments with anti-spam rules, and language packs cover more than 40 languages, right-to-left scripts included. Sales, tax, shipping, product, and customer reports, campaign tracking, an affiliate program, bulk customer mail, GDPR export and removal tools, and downloadable digital goods round out the business side. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.