No external database cluster to babysit, no proprietary cloud lock-in, and no bloated workspace hierarchy: Jotty stores every note, checklist, and Kanban board as plain Markdown and JSON files inside a single folder on your server. Need a quick grocery list with nested categories, progress bars, and drag-and-drop reordering? Spin one up in seconds, or flip any list into a multi-column Kanban project board with custom statuses, due-date calendar views, and a built-in time tracker. Write technical documentation in a TipTap-powered WYSIWYG and Markdown editor featuring syntax-highlighted code blocks, GitHub-flavored callouts, embedded Draw.io and Excalidraw diagrams, and OpenPGP client-side encryption for sensitive records. Connect ideas across your workspace using Obsidian-compatible wikilinks, inline mention suggestions, backlinks, and an interactive 2D and 3D knowledge graph that maps relationships between tasks and notes. Share individual notes or live Kanban boards publicly via customizable read-only links, or start the optional Model Context Protocol (MCP) companion container so AI assistants like Claude and Cursor can query your notes and check off items through your scoped REST API key. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Paca is a self-hosted project management platform and Scrumban workspace where autonomous artificial intelligence agents collaborate with human software engineers as first-class Scrum teammates instead of external chat assistants. Engineering teams manage sprints, backlogs, and task lifecycles through a shared real-time board powered by Socket.IO where both humans and agents pick up assignments and post progress updates. A native Model Context Protocol server connects external coding assistants such as Claude Desktop and Claude Code directly into projects, tasks, and sprint data without custom scraping scripts. Distributed agents execute in isolated runtime sandboxes powered by the OpenHands software development kit, co-authoring behavior-driven development Gherkin scenarios with product owners and maintaining living system design documents. Visual event-driven automation builders compose multi-branch trigger, condition, and action pipelines that evaluate task dependency gates and cron schedules. A sandboxed WebAssembly plugin runtime allows developers to write custom backend logic and custom board views using Go or Rust. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Own every visitor metric without cookies, consent banners, or external database clusters through Vince, a self-hosted web analytics platform engineered for fast multi-site traffic intelligence. Zero cookies. Sub-kilobyte tracking script. Unlimited domains and events. You can point existing Plausible Analytics tracker snippets directly at your instance and immediately begin recording unique visitors, total sessions, pageviews, views per visit, bounce rates, and visit durations across all of your properties. Interactive dashboards break down incoming traffic by referral sources, UTM campaign parameters, entry and exit pages, countries, regions, cities, device categories, browsers, and operating systems. Behavior analytics go beyond simple pageviews by capturing outbound link clicks, file downloads, 404 error pages, pageview goals, and custom event conversions with custom properties. Period-over-period comparisons let you benchmark current traffic and conversion rates against previous date ranges or custom calendar intervals with a single click. Dashboards stay private by default, but you can open public stats views or generate unique, optionally password-protected shared links for clients and stakeholders, as well as query metrics programmatically over the REST API. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Comment sections at the Washington Post, the Wall Street Journal, and newsrooms across 30 countries run on Coral (also known as Talk) - the platform built by journalists' technologists, started under the Mozilla Foundation and now stewarded by Vox Media as an Apache-2.0 project serving 23 languages. Its founding premise is that online comments are broken and moderation is the fix. Moderators get a full queue system - reported comments, system-held pending comments, and configurable pre-moderation - backed by AI toxicity scoring that warns commenters before posting and holds high-scoring comments for review, Akismet spam detection, banned and suspect word lists, and automatic repeat-offender handling that pre-moderates users whose rejection rate crosses a threshold. Readers get features designed for healthier conversation: journalist badges in threads, muting of annoying voices, notifications, instant new-comment alerts, and timeouts rather than just bans. For publishers the economics are the point - no ads, no trackers, no hidden pixels anywhere in the code, full ownership of audience data, and GDPR compliance beyond requirements. Integration is one embedded script; SSO connects existing registration, and a GraphQL API supports customization and extension.

Atomic transforms collections of personal Markdown notes into an AI-augmented knowledge graph by breaking documents down into semantically linked conceptual units. Users capture thoughts, research excerpts, and web clippings as modular notes that the system automatically chunks, embeds, and categorizes with hierarchical tags. An interactive force-directed canvas maps out the entire knowledge base, positioning related ideas closer together based on embedding cosine similarity rather than manual folder hierarchies. Built-in vector search queries across text embeddings directly within SQLite, retrieving precise contextual snippets in response to natural language prompts. The automated wiki engine synthesizes disparate notes into comprehensive reference articles equipped with verifiable inline citations back to original source materials. Integrated conversational agents leverage retrieved knowledge context to answer research questions, surface contradictions across past entries, and draft structured daily briefings. External AI tools can read, search, and update stored knowledge through an embedded Model Context Protocol server endpoint. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Yet Another API Development Environment delivers a self-hosted alternative to Postman designed from the ground up for teams that need secure, collaborative API development without sending sensitive credentials through third-party cloud services. The multi-user system manages team members with role-based permissions and supports external authentication through OAuth2 and OIDC providers, while all data persists in an H2 file-based database that survives container and server restarts. REST and WebSocket request testing includes environment variable substitution, request chaining, and Markdown documentation for each endpoint. The JavaScript scripting engine runs request and response scripts for automated testing and data extraction, with cron job scheduling and API-triggered execution for continuous integration workflows. Collections import directly from OpenAPI specifications and Postman exports, while outbound export generates request code in multiple languages and frameworks. The browser extension proxy for Chrome and Firefox routes requests through the user's browser to bypass CORS restrictions when testing localhost and internal APIs, with an alternative server-side proxy for headless environments. Single-file data import and export simplifies backup and migration between instances. The React and Vite frontend ships with dark mode enabled by default. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Publish high-resolution photography without social media compression using ChronoFrame, a self-hosted portfolio and gallery platform built around EXIF camera telemetry, live motion media, and interactive map exploration. Drop JPEG, PNG, WebP, TIFF, or HEIC images alongside paired MOV clips into the browser uploader, and the background task queue automatically extracts camera bodies, lenses, focal lengths, shutter speeds, and RGB histograms while pairing Apple Live Photos and Motion Photos for hover playback. Visitors browse your work through a responsive masonry grid with instant ThumbHash placeholders, inspect fine details inside a hardware-accelerated WebGL tiled viewer, or explore shooting locations on an interactive MapLibre or Mapbox globe powered by reverse geocoding. Curators can group shots into reordered albums, protect private collections with passwords, edit ratings and metadata in bulk, and generate custom share preview cards. Storage scales across local disks, S3-compatible buckets, and OpenList backends with configurable CDN delivery. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Upload files, get a share link, let it expire: PsiTransfer is a self-hosted WeTransfer with no accounts, no logins, and no third-party cloud with size caps and metadata harvesting. The engineering focus is large files over imperfect networks. Uploads use the tus.io resumable protocol, so a dropped connection on a multi-gigabyte video resumes exactly where it stopped once you're back online; downloads support HTTP range headers for the same resilience, and everything streams, so file size is bounded by your disk rather than memory. Files organize into upload buckets with retention you control: expire after a set time (up to weeks) or after a one-time download, with automatic cleanup when links lapse. Recipients need nothing installed - they open the link, preview files in modal views, and grab everything as a zip or tar.gz archive with one click. Buckets can be password-protected (AES-encrypted download lists), and security-through-obscurity is done properly: bucket URLs use hashed UUID tokens and stored filenames are replaced with UUIDs. An optional admin page (enabled by setting an admin password) lists bucket information and storage. The Vue.js frontend ships under 100 KB gzipped and is fully responsive. Honest caveat from the author: no end-to-end payload encryption yet. BSD-licensed, Docker-ready.

Plan multi-day expeditions, map custom waypoints, and coordinate shared group travel itineraries with TRIP, a private self-hosted journey management platform free from commercial tracking. Travelers can drop custom pins across global topographic or satellite maps, tagging locations with categories, visit durations, cost estimates, accessibility notes, and pet-friendly attributes. The visual trip builder organizes individual stops into ordered daily schedules, helping you calculate travel intervals and rearrange destination sequences using intuitive drag-and-drop tools. You can attach reference photos, booking confirmations, external links, and packing checklists directly to each itinerary milestone. Shared workspace controls enable travel companions to collaborate on upcoming road trips, leave comments on specific attractions, and coordinate shared responsibilities in real time. Dynamic filtering lets you isolate culinary destinations, outdoor hikes, or cultural landmarks by budget and travel style. Offline caching ensures your navigational routes and saved coordinates remain accessible in remote backcountry areas with spotty cellular coverage. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Engineering and product teams ship code to production daily with FeatBit, an enterprise feature flag and experimentation platform that controls exactly which user segments, regions, or percentage rollouts see each new capability. When a regression appears in production, operators toggle an instant kill switch, dial back canary weights from full traffic to one percent, or restrict access to internal QA accounts without redeploying containers. Reusable user segments group customers by subscription tier, device property, or custom attributes for consistent targeting across environments. Server-side and client-side SDKs for .NET, Java, Go, Python, Node.js, React, React Native, JavaScript, and OpenFeature synchronize flag states over WebSockets in under 100 milliseconds and evaluate rules locally in memory. Built-in A/B/n experimentation links flag variations to custom conversion events, click tracking, and pageview metrics so teams can validate product hypotheses with live telemetry. Scheduled rollouts, multi-step approval workflows, flag triggers, and webhook integrations with Slack, Datadog, Grafana, New Relic, and OpenTelemetry keep release operations auditable. Role-based access control and single sign-on govern every flag change. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Vigil monitors your entire distributed infrastructure and generates a public status page from a single Rust binary small enough to run on a Raspberry Pi, consuming minimal CPU and memory while providing crash-free reliability. Four distinct monitoring modes cover every topology: poll probes check HTTP, TCP, SSH, and ICMP endpoints for reachability with configurable intervals and thresholds; push probes receive health reports from Vigil Reporter libraries embedded in your application code across Node.js, Python, Golang, Rust, TypeScript, Dart, and C#; local probes delegate monitoring to Vigil Local slave daemons running behind firewalls on separate LANs; and script probes execute custom shell commands for specialized health checks. Each monitored service transitions through healthy, sick, and dead states based on consecutive probe failures, with configurable thresholds controlling state transition sensitivity. When services change state, Vigil dispatches notifications through twelve alert channels including Slack, Email, Twilio SMS, Telegram, Pushover, Gotify, XMPP, Matrix, Zulip, Cisco Webex, and generic webhooks. The generated status page displays service groups organized by category with real-time replica status, system load metrics from reporter probes, and a maintenance announcement system for communicating planned downtime through the Manager HTTP API. Configuration uses a single TOML file defining all probes, services, and notification channels with no database dependency. Docker deployment pulls the official image with volume-mounted configuration. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MPL-2.0 licensed.

One binary is all that stands between you and every Kubernetes cluster you own: Kubewall opens a realtime web dashboard over all of them, with no agents to install and nothing phoning home. Switch between clusters from the sidebar and browse workloads, networking, storage, configuration, and access control in tables that update live as pods start, fail, and reschedule. Open any resource to inspect its overview, edit its manifest in the built-in YAML editor with validation, watch its events, or stream logs aggregated across pods and containers with search and tail controls. A command palette jumps straight to any resource type, while faceted filters and global search cut through thousands of objects by name, namespace, label, or image. Scale deployments, restart pods, trigger rollout restarts, and apply manifests with a click, or forward a cluster service to your local machine without memorising kubectl incantations. An integrated AI assistant, connected to OpenAI, Claude, Gemini, DeepSeek, OpenRouter, Ollama, or a local model, helps troubleshoot failures and review configurations right beside the resource it concerns. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Product Hunt's Maker of the Year: Animockup delivers an alternative to expensive motion graphics tools for creating animated product teaser videos entirely in the browser. The FabricJS canvas engine provides a fully interactive editing surface where you import product videos or screenshots, place them inside device mockups ranging from iPhones and MacBooks to browser windows and smartwatches, and customize everything from background gradients to overlay text positioning. Anime.js powers the animation system with configurable start and end transitions, easing curves, and duration controls that produce smooth entrance and exit effects without timeline editors or keyframe knowledge. The built-in FFMPEG.wasm pipeline handles all video processing client-side — no server-side rendering required — exporting finished teasers to WebM, MP4, or GIF at custom framerates and resolutions up to 4K. The crop and reposition tool lets you precisely fit product footage into any device screen regardless of aspect ratio differences. Twenty-plus device frames cover phones, tablets, laptops, desktops, watches, and generic browser windows for maximum versatility. Firebase authentication handles user sessions while the optional Paddle integration manages subscriptions — or remove both for a fully free deployment. Self-hosting requires only a static web server with optional PHP for the payment webhook endpoint. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Your next business system does not need a year of scaffolding: Open Mercato hands you a running CRM, ERP, and commerce back office, and your team builds only the logic that makes your company different. Deals and pipelines live next to the product catalog, so a quote pulls real variants, price lists, and stock without swivel-chair exports. Orders flow into invoices, shipments, and payments in one motion, while warehouse lots and stock movements keep fulfillment honest about what can actually ship today. Customers and partners stop emailing your team for status: the self-service portal takes B2B orders, shows tracking, and files warranty claims directly. When a record needs a field nobody planned for, an administrator adds the custom entity from the panel, no migration deploy, and shapes its lifecycle with per-tenant workflows and business rules. Every change lands as an auditable command with an author attached, so mistakes get undone, sensitive columns get encrypted per tenant, and several companies share one install without seeing each other's data. Storefronts and mobile apps plug into generated REST APIs with OpenAPI documentation, attachments turn searchable through OCR, and AI coding agents extend the system because the architecture conventions are written down for them. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Discover, preview, and curate your personal music collection with Aurral, a self-hosted music discovery and library management server that turns listening history into automated playlists and album acquisitions. Connect your Last.fm, ListenBrainz, or Koito scrobble history to surface tailored artist recommendations, genre trends, upcoming releases, artist news, and nearby concert dates. Build scheduled rotating discovery flows that refresh automatically on your chosen cadence, or import existing playlists directly from Spotify, YouTube Music, Last.fm, and ListenBrainz. Preview tracks instantly in the browser before committing them to your permanent collection. Manage downloads through a built-in yt-dlp engine or route requests to slskd, SABnzbd, NZBGet, Prowlarr, deemix, and Lidarr with full queue, history, and upgrade controls. Stream your indexed library from the web player, connect Subsonic and OpenSubsonic apps such as Feishin or Music Assistant, and publish generated playlists straight to Navidrome, Plex, Plexamp, and Jellyfin. Multi-user profiles support granular permissions, custom discovery layouts, and single sign-on via OpenID Connect, Plex, Google, or reverse-proxy headers. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

TeamPass is a dedicated on-premise password manager built specifically for teams that need collaborative credential sharing with fine-grained access controls. Role-based access control defines user permissions through hierarchical folder trees where each folder and item can be independently set to write, read, or no access against assigned roles, enabling organizations to segment credentials across departments without exposing sensitive data. Passwords are encrypted in the database using Defuse PHP Encryption with per-installation unique saltkeys, while two-factor authentication supports configurable RFC 6238 TOTP profiles with custom digits, period, and algorithm settings alongside Duo Security and Yubico hardware key integration. LDAP and Active Directory native integration enables enterprise SSO with automatic user provisioning. The Security Posture Dashboard surfaces weak, reused, breached, overdue, no-expiry, widely-shared, and unreadable credentials through indicator cards that filter and deep-link directly to items. Secure Send creates expiring, view-count-limited one-time links optionally protected by recipient passphrases for sharing credentials with external users. Import from Bitwarden, LastPass, 1Password, and KeePassXC through a unified source selector, with export to encrypted offline files. Email notifications, password expiration policies, custom fields, and attachment support round out item management. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Portabase takes a zero-trust approach to database backups: lightweight Rust/Tokio agents deploy next to each database, encrypt dumps with AES-GCM before data ever leaves the host, and poll the Next.js control plane outbound every five seconds requiring zero inbound firewall rules. This architecture contains blast radius if the dashboard is compromised while supporting ten engines with stable backup and restore: PostgreSQL 12 through 18, MySQL 5.7 through 9, MariaDB 10 and 11, MongoDB 4 through 8, SQLite 3.x, Redis 2.8+, Valkey 7.2+, Firebird 3.0 through 5.0, Microsoft SQL Server 2017 through 2022 including Azure SQL, and Docker volumes on Engine 20.10+. Encrypted backups store on configurable backends including local filesystems, any S3-compatible provider (AWS, MinIO, RustFS), Google Cloud Storage, and Azure Blob Storage. Cron-based scheduling with Grandfather-Father-Son retention policies automates backup lifecycle management, while on-demand restore targets any compatible server for cross-environment recovery. The CLI installs agents with a single command and auto-updates when new versions ship. A RESTful API with MCP server integration enables automation from CI/CD pipelines and AI agent workflows. Developed by a non-profit under Apache-2.0. 1,270+ stars and 174 releases since October 2024. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console.

Web analytics tools ignore native mobile, desktop, and game apps; Aptabase was built for exactly those. If Firebase Analytics would force a privacy-policy footnote you don't want to write, this is the alternative - session-based metrics with no cookies, no IDFA or GAID, no device fingerprinting, and a daily-rotated salt that makes cross-day re-identification mathematically impossible. That design means GDPR, CCPA, and PECR compliance out of the box and "Data Not Collected" App Store privacy labels without ATT prompts. The SDK coverage is the widest in its category: eleven first-party libraries spanning Swift, Kotlin, Flutter, React Native, Tauri, Electron, .NET MAUI, NativeScript, Unity, Unreal Engine, and JavaScript for web - each MIT-licensed, following platform conventions, and accepting a custom host parameter that points at your instance. Integration is minutes: initialize with an app key, call trackEvent with optional properties, and the dashboard shows sessions, events, app versions, OS breakdowns, and country-level geography. The self-hosted stack is a .NET server over PostgreSQL for metadata and ClickHouse for high-volume event ingestion, giving cloud-parity features under an AGPL license. For indie iOS/Android apps, Electron and Tauri tools, and Unity or Unreal games, it replaces Firebase without the Google entanglement.