One front-end server can run your entire cloud: OpenNebula orchestrates KVM virtual machines and LXC containers across clusters of hosts, presenting everything through the FireEdge Sunstone web interface and a full API. Operators define VM templates once and instantiate them anywhere, attaching disks and networks, taking snapshots, scheduling actions, and opening remote consoles through Guacamole without leaving the browser. The OneDRS distributed resource scheduler reads historical and real-time metrics to predict demand spikes and migrate workloads before contention bites, with customizable policies and automation levels. GPU passthrough and PCI device hotplugging serve AI and accelerator workloads, while OVA import through the oneswap command ingests virtual machines exported from VMware vCenter for re-virtualization projects. Edge Clusters deploy on demand on premises or at remote providers, extending the same management model to hybrid and distributed sites without a separate stack. The 7.4 Helix release redesigns Sunstone with a slide-in side drawer and richer resource visualizations, and brings OneKS managed Kubernetes plus LVM storage to the Community Edition. Ceph and LVM datastores, incremental backups, cluster-level and generic quotas for resources like vGPUs, and OneFlow service orchestration for multi-VM applications round out daily operations. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

A complete WhatsApp Business Platform covering messaging, chatbot automation, and voice calling with IVR — a combination most self-hosted projects never attempt. The Fastglue/fasthttp backend processes WhatsApp Cloud API webhooks through PostgreSQL and Redis into a real-time WebSocket layer powering instant chat updates across a Vue 3 frontend built with shadcn-vue and TailwindCSS. Chatbot automation supports keyword triggers, multi-step conversation flows with branching logic, AI-powered responses from OpenAI, Anthropic, or Google models, knowledge base integration via vector stores, and seamless handoff to human agents when the bot gets stuck. The visual IVR builder uses a drag-and-drop node canvas where you wire greeting prompts, DTMF menu capture, HTTP callbacks to external APIs mid-call, business-hours routing by IANA timezone, agent team transfers with hold music, and reusable sub-flows. Every call recording streams encrypted to your S3-compatible bucket with retention you control. Multi-tenant architecture isolates organizations with separate data, roles, and API keys while a unified inbox presents both chat and call conversations to agents in a single dashboard. Meta-approved template management, bulk campaign messaging, analytics tracking, and a full REST API round out the platform. Deploy via Docker Compose with Postgres and Redis included. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL v3 licensed.

Applications publish an event once and stop caring who needs it next: Apache EventMesh receives CloudEvents over plain HTTP, stores them durably, and delivers each one to every subscription that matches. Producers call publish, consumers call subscribe or unsubscribe, and the runtime owns the registry, offsets, acknowledgements, and redelivery that messaging clients usually force you to build yourself. Subscribers choose load-balanced delivery for competing workers, broadcast delivery for every listener, or multicast for selected groups, and they receive events by HTTP long polling, Server-Sent Events, or WebSocket push. Filters drop irrelevant events before they leave the mesh, while transformers reshape payloads so a producer and consumer can disagree about format without either one changing code. Kafka and RocketMQ act as pluggable write-ahead storage, with an in-memory backend for development, and stateless runtime instances scale horizontally without consumer-group rebalancing. Twenty-three connectors move events into and out of RabbitMQ, Pulsar, MongoDB, MySQL change data capture, Redis, S3, Prometheus, Slack, DingTalk, Lark, WeChat, and AI services, each checkpointing offsets so failures replay instead of silently losing data. Agent-to-Agent protocol support and MCP connectors let AI agents exchange asynchronous events alongside synchronous tool calls, and event-triggered agents can publish decisions back into the mesh for downstream delivery. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

ExcaliDash adds persistent storage, access control, version history, and real-time collaboration to Excalidraw, transforming ephemeral whiteboarding sessions into a managed drawing library your team can rely on. The Node.js/Express backend with React/TypeScript frontend deploys via Docker Compose on port 6767, using Prisma ORM on SQLite for all drawings, users, and metadata. WebSocket-powered collaboration lets multiple users edit the same canvas simultaneously with live cursor presence. Drawing snapshots preserve every revision with visual preview and one-click restore to any previous state. Three authentication modes handle different deployment needs: local email/password for personal use, hybrid mode mixing native credentials with OIDC for gradual enterprise adoption, and enforced OIDC-only for organizations requiring SSO through providers like Authentik or Keycloak. Scoped sharing controls determine whether drawings stay private, shared internally with team members, or accessible via external links without authentication. Collections organize drawings through drag-and-drop grouping, full-text search locates any diagram instantly, and exports use the non-proprietary .excalidraw format ensuring complete data portability. 1,350+ stars since November 2025. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Production debugging slows to a crawl when logs, distributed traces, metrics, and session replays live in four disconnected dashboards, which is why Traceway consolidates every OpenTelemetry signal into a single self-hosted observability platform. Point any standard OTLP exporter directly at the ingestion endpoints without maintaining an intermediary collector or installing proprietary vendor SDKs. When an unhandled exception fires in production, automatic SHA-256 stack trace fingerprinting groups duplicates into prioritized issues complete with source-mapped frames and attached browser or Flutter session replays showing exact user clicks before the crash. Clicking any structured log entry jumps straight to its corresponding distributed span waterfall so engineers can trace slow database queries or failing downstream HTTP calls across microservices. Route performance bottlenecks surface immediately through per-endpoint P50, P95, and P99 latency percentiles ranked by Apdex and a five-factor impact score. Teams shipping AI features can also inspect LLM token consumption, model costs, tool calls, and multi-turn conversations grouped by customer identifier. Built-in on-call rotation schedules, escalation policies, and multi-channel alerts via Slack, Telegram, Pushover, email, and webhooks ensure incidents reach the right responder with one-click acknowledgment links. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Organizers running sports leagues, gaming tournaments, and community athletics can deploy Bracket as an open-source competition control hub that coordinates multi-stage events without recurring SaaS subscription fees. Competition directors can configure multi-tier tournament topologies combining single elimination, double elimination, round-robin pools, and dynamic Swiss format brackets within a unified event schedule. An interactive calendar grid enables operators to drag and drop fixtures between designated courts, assign start times, and balance player recovery intervals across multiple playing areas. Public dashboard displays generate real-time match outcomes, court assignments, and standings boards that spectators can monitor on mobile devices or overhead venue monitors with customized team logos. Club administrators can manage multiple regional athletic organizations, register rosters through bulk CSV spreadsheet imports, and coordinate simultaneous divisions spanning amateur and championship flights. Integrated OpenAPI REST endpoints allow external scoring overlays, live stream graphic generators, and automated result bots to query match statuses or submit verified referee scorecards programmatically. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Paste any YouTube Music album, playlist, or track link into Yubal and get back a clean, fully tagged music library instead of a pile of video files. Tracks land in Artist and Year-Album folders with numbered filenames, cover art, and synced .lrc lyrics files, while playlists become M3U files that reference the album copies so a song appearing in ten playlists is stored exactly once. Subscribe to playlists and a cron-driven scheduler pulls new tracks into your library automatically on the schedule you set. The web interface shows real-time progress and a job queue that works on mobile, with automatic retries on failed downloads and graceful cancellation when you change your mind. Lyrics come from lrclib.net with a YouTube Music fallback, ReplayGain tags keep playback volume consistent across tracks and whole albums, and audio arrives as opus, mp3, or m4a, downloaded directly when possible and transcoded otherwise. Finished libraries drop straight into Navidrome, Jellyfin, or Gonic, and a browser extension for Firefox and Chrome queues downloads or subscriptions from the YouTube page you are already browsing. Optional cookie support unlocks private playlists, Liked Music, and age-restricted content, and a companion CLI downloads and inspects metadata from the terminal. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

SnappyMail is a fast, privacy-respecting webmail client that connects to any existing IMAP and SMTP server, booting in under a second with a JavaScript payload of just 138 KB under Brotli compression (down from RainLoop's 8 MB fork origin). No database is required: all configuration and user data persists as flat files in a single volume, making Docker deployment trivially simple with the roughly 30 MB image consuming approximately 50 MB of RAM. Built-in PGP encryption supports three backends: OpenPGP.js v5 with ECDSA and EDDSA key generation, GnuPG integration, and Mailvelope browser extension compatibility, eliminating the need for separate encryption plugins. The integrated Sieve script editor enables users to create mail filtering rules, vacation auto-responders, and forwarding conditions directly within the web interface when connected to ManageSieve-capable servers on port 4190. Multi-domain administration allows a single instance to serve users across multiple IMAP servers with per-domain authentication routing. The admin panel manages extensions, security settings, branding customization, and domain configuration. GDPR-friendly by design, it removes all social media integrations, Gravatar lookups, and external tracking present in RainLoop. Dark mode strips background and font colors from email messages. The modified Squire HTML editor replaces CKEditor for composing rich-text messages. Scores 99% on Lighthouse performance. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Smartstore is a self-hosted eCommerce platform that lets one install run several multilingual, multi-currency storefronts, with a drag-and-drop page builder and built-in AI writing tools. The catalog takes unlimited products and categories, with variants, bundles, grouped and downloadable products, tier pricing, and cross-selling, while faceted search keeps large assortments easy to filter. Shoppers get a responsive storefront with a streamlined checkout, reviews, wishlists, and wallet or gift-card payments; staff get order, shipment, and return handling plus a dashboard with sales statistics and bestseller lists. Marketing tools cover discounts, coupons, reward points, newsletters, affiliates, a blog, and forums, and the visual Rule Builder grants discounts, offers shipping and payment methods, and assigns customers to roles automatically. AI helpers draft product descriptions and meta tags with OpenAI, Gemini, Claude, DeepSeek, or a self-hosted Ollama model, and image tools create or edit pictures. A Media Manager organizes images and files in folders with filters and metadata. Import and export profiles move catalogs in and out on a schedule, a REST API connects other systems, and tree-based permissions decide which staff roles may do what. The Docker image starts a browser installer that connects to MySQL, PostgreSQL, or SQL Server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Turn company knowledge into structured courses in minutes: ClassroomIO's AI course builder takes your documents, policies, or topic outlines and generates complete lessons with exercises using Gemini, GPT-4o, or Claude — then an in-lesson AI tutor helps employees study the material at their own pace. The SvelteKit 5 and Hono API architecture backs a platform purpose-built for employee compliance training, customer education, and partner certification programs. Programs group courses into cohorts with team management, progress tracking, and goal setting. Live Kahoot-style quizzes drive real-time engagement during training sessions with automatic scoring and leaderboards. Exercises support multiple question types with automatic grading for multiple choice and AI-assisted evaluation for open-ended responses — teachers review and override all AI decisions. Branded certificates with custom IDs reward course completion. Custom domain mapping through Cloudflare lets organizations serve their learning portal under their own brand. MinIO provides S3-compatible storage for documents and video uploads. The REST API and signed webhooks enable programmatic enrollment and completion tracking, while an MCP server on npm supports AI-native authoring workflows. An embeddable widget drops the course catalog onto any website. Better Auth handles sessions and OAuth with optional SSO. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Before a change lands in the main branch, Review Board gives your team a self-hosted code review server where reviewers read the diff, open issues on specific lines, and sign off with a Ship It. Post a review request from the web or with RBTools, either before you commit or after, and every update becomes a new revision that stays in the history. Interdiffs show exactly what changed between revisions, and moved-code detection keeps rearranged blocks from drowning out real edits. Comments can open issues that reviewers later mark fixed or dropped. Images and Markdown files can be reviewed alongside code, with split, onion-skin, color, and side-by-side diffs for pictures. A dashboard with customizable columns separates incoming from outgoing requests by review group. Connect Git, Mercurial, Subversion, or Perforce repositories, including ones hosted on GitHub or GitLab, and review them all on one server. Slack and Discord notifications, Jenkins builds, and Review Bot linters report back inside the review. Private repositories and hidden or invite-only review groups restrict who sees what, with sign-in through Active Directory, LDAP, or SAML 2.0. A REST API, WebHooks, and Python extensions cover custom workflows. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

When a power outage hits your server rack, deciphering raw command-line output from Network UPS Tools should not stand between you and a safe shutdown; PeaNUT wraps your NUT servers in a real-time web dashboard that monitors battery charge, load capacity, and voltage telemetry across every uninterruptible power supply on your network. Operators can connect multiple local or remote NUT servers into a single interface and switch between devices with one click. Live gauges track battery percentage, estimated runtime, real power draw in watts, and apparent power in volt-amperes. Interactive line charts plot input and output voltage alongside load fluctuations over time. Need to test a battery or silence an alarm? You can execute instant UPS hardware commands, edit writable device variables, or open a browser-based terminal directly to the underlying NUT daemon without leaving the web interface. Configuration works either through the visual settings panel or a declarative YAML file, protected by built-in account authentication. For broader infrastructure observability, you can stream time-series power data to InfluxDB v2, scrape the native Prometheus metrics endpoint into Grafana, query the REST and WebSocket APIs, or embed live UPS status cards inside Homepage and Glance dashboards. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Point Sirius Scan at a network range and it finds live hosts, fingerprints their services, and lists every matching CVE with its CVSS score in a live web dashboard. The Vulnerability Navigator groups findings by severity, filters on CVSS, and exports results for remediation tracking. Scans run on Nmap with NSE scripts kept in sync with upstream, alongside Naabu port scanning. Lightweight remote agents connect back over gRPC from other networks, so segments the central scanner cannot reach still get assessed, and the same agents can run YAML detection templates locally in CLI mode with no server connection at all. An operator console runs PowerShell commands against connected agents and keeps command history beside the scan results. Real-time progress, severity trend charts, host detail pages, and an environment overview show what changed between scans. A REST API on port 9001 with API key authentication feeds results into existing security workflows, while service health monitoring and centralized logging confirm the platform itself is behaving. An installer generates fresh secrets and an initial admin password, and production overlays tighten the deployment further. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Friendica connects to more federation protocols than any other single platform: ActivityPub reaches Mastodon, Pleroma, Misskey, Lemmy, Pixelfed, and PeerTube; the Diaspora protocol bridges that network; and OStatus provides legacy compatibility. But protocol reach is just the foundation. Where most fediverse platforms stop at microblogging, Friendica offers long-form posts, photo albums, event calendars with RSVP, group discussions, and rich multimedia content. BlueSky and Tumblr connectors extend your reach into non-federated networks, while RSS import pulls content from any blog or news source into your timeline. Privacy controls let you scope each post to specific contacts, groups, or public visibility with per-post granularity rather than account-wide settings. Multiple themes customize the interface from Facebook-like layouts to minimal designs, and Fedilab provides native mobile access. Under the hood, the PHP application with MariaDB runs as either an Apache or FPM Docker image with Redis caching and background cron workers handling federation delivery, media processing, and notification dispatch. One of the oldest fediverse projects (1,650+ stars, 160+ contributors since 2010), Friendica has weathered every protocol evolution and platform migration the decentralized web has thrown at it, making it one of the most battle-tested social networking platforms available.

Commercial flight logbooks frequently lock historical travel records behind annual subscriptions or shut down unexpectedly, whereas AirTrail preserves your complete aviation history on an interactive world map under your own control. Enter a flight number to look up routes automatically or log departures manually with seat numbers, cabin classes, aircraft registrations, timestamps, notes, and custom metadata fields. Switching from another tracker takes seconds: the built-in importer ingests CSV, ICS, and JSON exports from MyFlightradar24, Flighty, App in the Air, OpenFlights, TripIt, JetLog, byAir, and JetLovers. The vector map renders geodesic flight paths, recorded GPS tracks, and airport runway details across customizable basemaps. Detailed statistics dashboards break down total distance flown, time in the air, top airlines, aircraft models, and visited countries. Families and travel groups can share a single instance with role-based permissions, OAuth single sign-on, and read-only public links, while developers automate entries through the versioned REST API or Model Context Protocol server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Product catalogs, help centers, and document archives all fail the same way: visitors type a few words, get the wrong results, and leave. Apache Solr is the search platform behind fast, relevant answers, returning ranked matches with faceted filters, highlighted snippets, spell suggestions, and geospatial distance in a single query. Index documents through HTTP updates or data import handlers, shape fields in the schema, and watch changes appear through near-real-time indexing without rebuilding the corpus. SolrCloud turns one index into a distributed collection: shards split large corpora across nodes, replicas copy each shard for failover and query load, and ZooKeeper coordinates configuration so every node serves the same schema. Dense vector fields store embeddings beside your text, and the KNN parser retrieves nearest neighbors through HNSW graphs, so semantic search runs in the same engine as keyword search instead of a second system. A combined query handler merges keyword and vector rankings with reciprocal rank fusion, and an enrichment processor can call language models at index time to tag or summarize documents as they arrive. Streaming expressions add analytics over results, from rollups and percentiles to joins across collections, while JWT authentication and authorization rules protect the admin console and APIs. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

LMS is a self-hosted music server that streams your own library to any web browser or Subsonic-compatible player. Point it at a folder of tagged files and it builds a library that understands multi-valued genres and moods, composer, conductor, and producer credits, release types, and release groups that keep remasters beside the original. MusicBrainz identifiers settle duplicate artist and album names, and an artist information folder in Kodi NFO format adds biographies and portraits. Browse with filters like Electronic plus Relaxed, then switch on radio mode and the queue refills itself with similar tracks, chosen by audio similarity or by tags. Plays can be scrobbled to ListenBrainz and Last.fm, and loved tracks synchronize with ListenBrainz. Phone apps connect through the Subsonic and OpenSubsonic API with a personal API key, and transcoding trims bandwidth on slow connections. ReplayGain evens out loudness, podcasts and lyrics sit in the same interface, and an admin-only jukebox mode plays through the server's own audio output. Several libraries can live side by side, a .lmsignore file keeps unwanted folders out of scans, and logins can use the internal user database, PAM, or reverse-proxy SSO headers. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

When warehouse data never reaches the CRM, ad platform, or help desk that needs it, Multiwoven is the open-source reverse ETL platform that syncs it there on a schedule. Sources include Snowflake, BigQuery, Redshift, Databricks, PostgreSQL, ClickHouse, MariaDB, Oracle, Amazon S3, and SFTP. Models define what to move: write SQL with a 100-row preview, pick tables in a visual selector, or reuse existing dbt models. Destinations span Salesforce, HubSpot, Klaviyo, Mailchimp, Zendesk, Slack, Airtable, Google Sheets, Stripe, Facebook Custom Audiences, HTTP endpoints, and vector stores such as Pinecone, Qdrant, and Weaviate. Each sync maps model columns onto destination objects like Salesforce Account, Contact, or Opportunity, then runs as a full refresh or as an incremental sync that moves only new or changed rows, optionally tracked by a cursor field. Schedules can be manual, an interval from minutes to weeks, or a cron expression. A dashboard reports sync activity, each run records its status with successful and failed row counts, and failed runs can trigger status emails. Workspaces keep sources, models, syncs, and destinations separate for each team, while Admin, Member, and Viewer roles and email invitations control access. A connector framework lets teams add sources or destinations that are not yet supported. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.