AudioMuse-AI transforms your self-hosted music collection into an intelligent sonic discovery universe that generates groove-aware playlists without relying on tag metadata or external streaming APIs. The platform scans audio files directly to extract acoustic properties, rhythmic cadence, harmonic density, and lyrical themes across seventy-two supported languages. Listeners can explore their library through a dynamic two-dimensional interactive music map, discover hidden sonic connections between distant genres, or chart smooth transitional song paths between two completely different tracks. Custom prompt-based querying lets users request niche vibes like late-night lo-fi piano, while automated clustering groups acoustically similar tracks into fresh, genre-defying collections. With Song Alchemy, curators fine-tune playlist moods by interactively adding or subtracting acoustic traits before exporting clean tracklists back to Navidrome, Jellyfin, LMS, Lyrion, Emby, or Plex. A built-in acoustic fingerprinting engine even identifies mystery tracks from twenty-second audio snippets, deduplicating songs across multi-server topologies so every file is processed only once. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Behind one admin panel, DefGuard runs a WireGuard VPN, an identity provider, and multi-factor authentication, so every person and device proves who they are before reaching your private network. Administrators define VPN locations, assign which users and groups may enter each one, and enforce firewall rules that allow or deny traffic per location, with changes applied to gateways in real time. People enroll remotely through a guided self-service flow, register their own laptops and phones, and connect with desktop and mobile clients that show live connection statistics. Sign-in goes well beyond passwords, because the built-in OpenID Connect provider gives internal tools single sign-on, while TOTP codes, WebAuthn and FIDO2 keys, email tokens, and mobile biometrics gate each connection. Directory teams sync accounts from LDAP and Active Directory, or federate sign-in through Google, Microsoft, and custom OpenID providers, instead of maintaining a separate user list. Every authentication, enrollment, and policy change lands in a searchable activity log, and webhooks plus a REST API let surrounding systems react to access events automatically. Gateways keep enforcing access from a local cache when the control plane is unreachable, and several gateways can front the same location for failover. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Open Compute is a self-hosted Cloudflare Workers-compatible platform that runs your Workers, storage, and AI services on hardware you own, from one binary and one daemon. Deploy the Worker code you already wrote with its config file and framework adapters, then roll back to an earlier immutable deployment when a release misbehaves. Serve traffic locally or over HTTPS through the shared Gateway, with routes you control instead of a vendor account. Each instance stays isolated with its own data directory and credentials, while you switch between registered instances from the same operator view. Bindings cover the platform pieces applications actually need: key-value data, SQL databases, object storage, stateful objects, queues, durable multi-step workflows, scheduled cron, cache, vector search, and AI search. Logs and a live tail show what running Workers are doing right now, and health, backup, and recovery workflows keep a single machine manageable without a cluster. Verified upgrades roll back automatically when something fails, and object bytes can move to S3-compatible storage when local disk is no longer enough. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Convoy is an enterprise-grade webhooks gateway that manages both incoming and outgoing webhook traffic to guarantee reliable event delivery without exposing internal microservices to the public internet. Organizations deploy the platform at the edge to ingest events from message brokers such as Apache Kafka, RabbitMQ, and Google Cloud PubSub, or receive HTTP webhooks from third-party services directly. The gateway enforces delivery policies through configurable rate limiting per endpoint, circuit breaking during downstream outages, and automated retries using constant or exponential backoff with jitter. Developers can generate customer-facing webhook portals embedded via iframes, allowing end users to inspect delivery attempts, verify HMAC-SHA256 signatures, and manually replay failed events. Comprehensive security controls include static egress IP proxying to prevent server-side request forgery, automated rolling secret keys, and instant alerting via Slack or email when endpoints fail consecutively. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Elastic License 2.0 licensed.

Grimoire captures, extracts, and indexes the content behind your bookmarks so you can search what pages actually say, not just their titles and URLs. The ingestion pipeline accepts links from the web UI, REST API, MCP server, browser bookmarklet, or bulk import, then fetches each page and extracts readable content using specialized parsers for GitHub repos, GitHub issues, StackOverflow threads, YouTube transcripts, PDFs, and standard web articles. Everything stores locally in SQLite with file-based content archives. Search operates in three modes: FTS5 keyword matching for exact terms, semantic embedding search for meaning-based retrieval using vector similarity, or a hybrid ranking mode combining both. Optional AI providers including OpenAI, Ollama, Anthropic, DeepSeek, and any OpenAI-compatible endpoint generate automatic tags, summaries, and embeddings without being required for core functionality. The interface built with React 18, Vite, TypeScript, Tailwind CSS, and Radix UI supports categories, nested tags, notes, archive and trash states, read-later flags, and multi-user isolated spaces. A single Bun-powered Hono process serves both the compiled frontend and the REST API on port 3210, requiring only one Docker container and a SQLite volume. Backup and restore export bookmarks, content, settings, and metadata as portable ZIP archives. Nearly 3,000 GitHub stars reflect growing adoption among developers and researchers. Running on a VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Transforming fragmented research notes, daily technical logs, and project documentation into an interconnected knowledge base is what NoteDiscovery delivers for privacy-conscious teams and researchers. Writers compose rich documents using a dual-pane editor that renders MathJax equations, interactive task lists, and dynamic Mermaid sequence diagrams side by side with raw text. The interactive knowledge graph maps semantic relationships across notebooks, allowing researchers to explore backlinks, uncover hidden topical connections, and navigate complex idea webs visually. Team members sketch architecture diagrams and wireframes directly inside note canvases using the integrated drawing tool, saving revisions as embedded image layers without external editors. The platform organizes thoughts through flexible tag hierarchies, nested folder trees, and reusable document templates equipped with automatic date and variable substitutions. Autonomous coding assistants and language models query documentation, create structured meeting summaries, and update project indexes directly through the native Model Context Protocol server. Built-in export tools convert notebook collections into standalone HTML packages, printable documents, or portable Markdown archives for offline archiving. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Follow every sale from first inquiry to final payment inside one self-hosted CRM. Cordys CRM splits the lead-to-cash cycle into connected modules: leads with custom forms and one-click conversion, customers with contact records and shared follow-up among team members, and opportunities that advance through configurable stages from needs confirmation to won or lost. Quotations and contracts come next, with contracts carrying payment plans, payment records, business titles, and invoice records so every collection stays traceable. Orders link to contracts and move through a customizable status flow covering shipment requests, partial and full shipment, inspection, and completion. Approval workflows route requests to reviewers and keep an approval history, and real-time notifications reach users while they work. Administrators draw the organization chart, assign role-based permissions, configure modules and form fields without code, and review system logs. An MCP server secured with per-user API keys lets MaxKB agents search records, create leads, customers, opportunities, and contacts, log follow-ups, and update accounts, while an Agents module embeds those assistants in the CRM and CRM Skills connect OpenClaw and WorkBuddy to the sales process. Sales data can feed DataEase dashboards, WeCom, DingTalk, and Lark integrations link departments and messages to the office platforms teams already use, and the interface ships in English and Chinese. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed with FIT2CLOUD branding terms.

Raw zone files and API calls become something a whole team can operate safely once PowerDNS-Admin puts its web interface in front of a PowerDNS authoritative server. It's a Python/Flask application covering full forward and reverse zone management, with the touches that matter in daily DNS work: zone templates for stamping out consistent new domains, easy IPv6 PTR record editing (reverse zones by hand are misery), full IDN/Punycode support for internationalized domains, and DynDNS 2 protocol support so routers and scripts can update records the way they would against a commercial dynamic-DNS service. Access control is enterprise-grade: local users, LDAP against OpenLDAP or Active Directory, SAML, and OAuth via Google, GitHub, Azure, or OpenID Connect, hardened with TOTP two-factor authentication. Role-based permissions extend to zone-specific access control - hand a developer their project's zone without exposing the rest of your namespace - and activity logging records who changed which record when, the audit trail bare PowerDNS never gives you. The dashboard monitors PDNS service configuration and statistics, and its own API exposes zone and record management for automation on top of the UI. Runs against MySQL/MariaDB or PostgreSQL, talking to PowerDNS through its REST API. MIT-licensed.

Hosting companies that sell VPS plans, game servers, or dedicated machines get a branded storefront, recurring billing, and a ticket desk from Paymenter, running on their own server. A customer browses a category, picks a free, one-time, or recurring plan billed every few days, weeks, months, or years, and shapes the order with select, radio, checkbox, text, number, or textarea options, some of which carry their own price. Prices can differ per currency, and a setup fee is optional. Payment runs through Stripe, PayPal, or Mollie, with tax rates and coupons set from the admin panel. Once it clears, a server extension for Pterodactyl, Virtualizor, VirtFusion, Convoy, cPanel, Plesk, DirectAdmin, or Enhance creates the service. A daily job issues renewal invoices, suspends overdue accounts, and terminates long-overdue ones. The customer portal covers services, invoices, and tickets in 24 languages, and tickets accept replies by IMAP email piping. Staff work with roles, audit logs, email logs, and notification templates, while API keys and OAuth clients connect outside tools. Optional extensions add an affiliate program, announcements, and Discord alerts. Moving over from WHMCS takes one built-in command that imports clients, products, services, tickets, and invoices from a copy of your database. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Instead of handing your reading history to a retail platform and letting an algorithm decide what you read next, BookWyrm lets a self-hosted community of readers make the recommendations. Shelve every book as to-read, currently reading, stopped, or finished, record start and finish dates with progress updates along the way, and set an annual reading goal to keep the habit honest. Rate and review finished books, drop a comment while you are mid-chapter, or save a quotation worth keeping, and all of it can appear on the book page alongside reviews aggregated from other connected instances. Follow friends to see their shelves fill up, join a group to build a shared reading list, or create your own list and choose whether it stays closed, accepts suggestions for approval, opens to everyone, or belongs to the group. Posts, shelves, and lists each carry their own privacy level, public, unlisted, followers-only, or private, and you can approve followers by hand before they see anything. Because instances federate over ActivityPub, your readers can follow you from another BookWyrm community or straight from Mastodon, and book metadata is shared between servers so small instances do not catalog alone. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Anti-Capitalist Software License licensed.

Turn any server into a high-speed media vault and file-sharing hub with Chibisafe, a self-hosted upload platform built for chunked large-file transfers, organized albums, and instant desktop screenshot workflows. Users drag and drop photos, videos, archives, or documents into the browser uploader, where multi-gigabyte files are automatically split into chunks to prevent network drops from ruining an active transfer. Uploaded media renders inside a responsive masonry or list gallery with in-browser video and audio previews, custom file tags, search filtering, and one-click shareable links. Organizers group related uploads into folders and public albums, mark sensitive collections with content warnings before loading, and publish syntax-highlighted text snippets or code gists alongside shortened URLs. Desktop and mobile power users connect ShareX, iOS Shortcuts, macOS quick actions, fswatch folder monitors, or the companion browser extension using personal API keys that route captures straight into designated albums. Instance administrators toggle between public, open-registration, and invite-only modes, enforce per-user storage quotas, offload storage to AWS S3, Backblaze B2, MinIO, or Wasabi via signed URLs, and customize rate limits or allowed extensions directly from the web settings panel. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Carbon delivers a unified manufacturing operating system that eliminates the integration tax of running separate ERP, MES, and QMS platforms. The Remix and TypeScript frontend paired with Supabase PostgreSQL backend provides full-stack type safety from database schema to React components, with real-time subscriptions pushing production floor updates to every connected client. The built-in MCP server exposes 1,374 operations across 15 modules through three discovery tools, enabling AI agents to interact with manufacturing data while respecting attribute-based access control. Nested bill of materials with unlimited depth supports complex assemblies, while the MRP engine calculates material requirements across multi-level structures with configurable lead times and safety stock. The configurator handles configure-to-order scenarios with rule-based variant generation. Full lot and serial traceability from receiving through shipping satisfies AS9100, ISO 13485, CFR Part 11, and ITAR compliance requirements. Custom fields extend any entity without schema modification, and the app framework lets integrators build domain-specific modules that plug into the core navigation, permissions, and data layer. Typed API clients for TypeScript, Python, C#, and cURL enable programmatic access to every manufacturing operation. Docker-based local development boots Postgres, Redis, Inngest, and the application stack with a single CLI command. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

A Misago forum comes with threads, polls, private conversations, nested categories, and the moderation tools to keep them in order. Categories nest to any depth. Permissions follow rank, role, and category. Registration can require e-mail activation or administrator approval, and a Q&A challenge, reCAPTCHA, Stop Forum Spam, or an IP blacklist can turn away spam sign-ups. More than 50 OAuth providers, including Google, GitHub, Steam, and Facebook, can handle sign-in. Posts accept GitHub-flavoured Markdown, a BBCode subset, or both, and attachments get thumbnails. Polls allow public or private voters, multiple choices, vote changes, and deadlines. Question threads let one reply be marked as the best answer. A post-accurate read tracker flags threads with new replies. Private threads stay visible only to the people invited. Presence shows who is online, and members can hide their own activity from non-admins. Custom profile fields get their own display and validation rules. Features and settings for GDPR compliance are included. Themes restyle the forum from the admin panel, and plugins extend it through action and filter hooks. Moderators can edit, move, hide, approve, delete, or close content, and a moderation queue holds new submissions for review before other members see them. If someone empties a post, the edit log shows the original wording and can restore it. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-2.0 licensed.

Building healthcare software usually means assembling a FHIR data store, an identity provider, audit logging, and clinical interfaces before any product code gets written, and Medplum ships all of it as one open-source platform. Every clinical record, from patients and encounters to observations, medications, and appointments, lives in a standards-based repository you can query through REST and GraphQL APIs with full search parameters. Sign-in and permissions come built in through OAuth, OpenID Connect, and SMART-on-FHIR, with access policies that control read and write rights down to the resource, compartment, and field level. The included web app lets your team browse and edit any resource, manage project users, clients, bots, and secrets, and review a complete audit trail where every read, write, and login is recorded. Bots run your TypeScript logic inside the platform when resources change, on schedules, or over HTTP, handling jobs like HL7 transforms, eligibility checks, and notifications without another server to operate. Subscriptions push real-time events to your services through webhooks or WebSockets with retries and signing, and projects partition data so each clinic or customer stays isolated on one deployment. Clinicians get ready-made interfaces for charting, scheduling, eligibility, and billing that you can fork and rebrand, while patients reach their records through portals and SMART health links. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Memoh delivers an open-source multi-agent platform where every AI agent gets its own computer — not a chat window but a fully isolated container with dedicated filesystem, desktop environment, browser, network stack, and persistent long-term memory that survives across sessions, days, and platforms. The containerd-based runtime ensures each bot operates in complete isolation with snapshot and data import/export capabilities. The memory engine uses LLM-driven fact extraction with hybrid retrieval combining dense embeddings via Qdrant, sparse vectors, and BM25, plus 24-hour context loading and automatic compaction — with Mem0 and OpenViking as drop-in alternatives. Ten communication channels connect agents to users through Telegram, Discord, Lark, QQ, Matrix, WeCom, WeChat, Email, Web UI, and group chats with cross-platform identity binding. MCP tool calling enables agents to interact with external services, while browser automation drives GUI workflows for web research and data extraction. Agent hosting supports running external coding agents like Codex and Claude Code inside Memoh workspaces via ACP with per-bot configuration. Scheduled tasks run without human triggers, and agents proactively reach out when needed. The web dashboard built with Vue 3 and Tailwind CSS provides streaming chat, tool call visualization, file management, model and provider configuration, and bot lifecycle management. Deploy via Docker Compose with PostgreSQL, Qdrant, sparse service, and the Go backend server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Elasticvue is a graphical interface for Elasticsearch where you can inspect cluster health, browse indices, search and edit documents, and send REST queries. Start on the Home tab, which summarizes status, nodes, shards, indices, document counts, and disk usage. Nodes shows load, CPU, RAM, heap, and disk for each member, and Shards lays out every primary and replica in a grid with a switch for shard allocation. Indices handles creation, aliases, templates, and bulk actions. Search runs query string searches across an index pattern, opens any hit in a JSON editor for updates or deletion, and downloads results as JSON. Rest sends any request from tabbed editors with history, saved queries, and examples, while Snapshots manages repositories and backups. Version 1.16 adds user and role management for Elasticsearch clusters. Secured clusters connect with basic authentication, API keys, or AWS IAM credentials, and the Docker image preloads cluster definitions from an environment variable or a mounted JSON file. Elasticvue supports every Elasticsearch version, even end-of-life releases, and speaks English, Chinese, French, Russian, Japanese, and Italian. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Curating digital comic archives, serialized manga, and electronic book libraries becomes effortless with Stump, a high-performance reading server that streams media collections over OPDS protocols directly to web browsers and e-reader hardware. Readers can organize extensive collections across CBZ, CBR, PDF, and EPUB formats, utilizing automated scanners that extract embedded ComicInfo XML and Calibre metadata tags. The built-in web reader renders high-resolution comic spreads, continuous vertical webtoon scrolls, and reflowable text with customizable color themes, font scaling, and reading direction toggles. Users can highlight passages, create persistent notes inside EPUB editions, and organize complex franchises into custom reading lists, oneshots, and smart filter collections. Bi-directional synchronization integrates with Kobo and KOReader hardware devices, maintaining page progression and bookmark states across handhelds and desktop sessions. Server administrators can configure multi-user access rules, enforce age restriction thresholds, and provision user-scoped API tokens for automated script pipelines and third-party companion tools. GraphQL and REST endpoints expose the entire catalog structure, allowing media collectors to integrate external metadata scrapers and trigger background library indexing tasks. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Comments for small sites without Disqus's baggage: Cusdis is a lightweight, privacy-first, open-source comment system for embedding under blog posts and articles. The embedded JavaScript SDK is about 5 KB gzipped (Disqus is roughly 24 KB), sets no cookies, runs no tracking, and does not require readers to create an account or sign in before commenting. Integration is two lines: a container div with your app ID and an async script tag, with ready-made adapters for common frameworks and static site generators. Moderation is approval-based - new comments stay hidden until you approve them from the dashboard, and email notifications include a Quick Approve link that approves or replies to a comment from your phone without logging in. A webhook fires on every new comment for integrations like Telegram notifications. The widget ships with built-in i18n and dark mode. The stack is TypeScript and Next.js with a Prisma data layer, deployable via Docker with PostgreSQL. Deliberately minimalist: no ads, no reader profiling, and your comment data lives in your own database.