Borg UI is a self-hosted web management interface for BorgBackup that eliminates complex command-line syntax by organizing deduplicated backups, automated pruning schedules, and interactive file restorations into an intuitive graphical control center. System administrators connect local drives, remote SSH hosts, and SFTP endpoints to establish resilient storage repositories guarded by client-side encryption and cryptographic authentication. The centralized dashboard visualizes storage capacity, compression ratios, deduplication savings, and the health status of active backup jobs in real time. Configurable backup plans schedule automated cron jobs with granular retention rules, executing pre-backup database dumps and filesystem snapshots before running incremental syncs and background integrity checks. Users browse multi-version archive filesystems directly from the web browser, searching file trees and extracting individual files or entire folders without manual command line extraction. The platform orchestrates remote fleet backups by deploying SSH keys across client machines, tracking connection health, and executing non-disruptive background operations. Comprehensive alert routing dispatches real-time job status notifications, failure warnings, and storage alerts across Discord, Telegram, Slack, and email using integrated multi-channel messaging services. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GNU AGPLv3 licensed.

With 1,450+ GitHub stars and a live demo on Vercel, this Bloomberg Terminal clone delivers a professional-grade financial dashboard without the $24,000 annual seat license. The Next.js 15 App Router with React 19 and TypeScript serves a single-page terminal interface optimized for constantly mutating financial data, with partial pre-rendering enabling sub-500ms initial loads even on data-heavy views. Upstash Redis caches AlphaVantage market data to minimize API calls while maintaining sub-second update latency through React Query polling with configurable refresh rates. OpenAI integration provides AI-powered market insights, sentiment analysis, and trend interpretation directly within the terminal interface. Multiple specialized views cover market data tables with bid/ask spreads, financial news aggregation with category filtering, market movers highlighting top gainers and losers, and volatility analysis with historical comparison charts. Jotai atoms manage local state for watchlists, layout preferences, and terminal sessions while React Query handles server-state synchronization with aggressive stale-while-revalidate caching. The shadcn/ui component library with Tailwind CSS delivers accessible, keyboard-navigable interface elements styled after Bloomberg's iconic dark terminal aesthetic. Security features include origin restriction, rate limiting via Redis, and Zod-based input validation on all API routes. Motion (formerly Framer Motion) animates transitions between views and data updates without layout shift. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Kuzzle ships a production-ready backend from day one: data storage with Elasticsearch search, real-time pub/sub notifications, user authentication, role-based permissions, and a multi-protocol API serving HTTP, WebSocket, and MQTT simultaneously on port 7512. Rather than rebuilding these standard features from scratch for each project, you get a ready-made backend that accepts connections from web applications, mobile clients, and IoT devices through one unified API surface. Elasticsearch provides persistent document storage with full-text search, geospatial queries, and aggregation pipelines, while Redis handles internal caching and memory storage operations. The Koncorde real-time engine powers pub/sub messaging and database notifications, enabling clients to subscribe to document changes with filter conditions that trigger instant updates when matching data is created, modified, or deleted. User management includes JWT-based authentication, role-based access control with granular permissions at the controller and action level, and pluggable authentication strategies via Passport.js. The extensible plugin framework allows developing custom business logic, additional authentication providers, storage connectors, and protocol handlers. Client SDKs for JavaScript, Dart, Kotlin, and C++ accelerate frontend development, while the Kourou CLI provides command-line API access and project scaffolding. The Vue.js Admin Console offers a web interface for managing indexes, collections, documents, users, profiles, and roles. Horizontal scaling through masterless cluster mode targets 99.99% uptime without single points of failure. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Where Traefik's built-in dashboard only shows what is running, Traefik Manager lets you change it: add routes, middlewares, and services from forms and wizards instead of editing YAML by hand. A first-run wizard connects to the Traefik API, creates a route for the manager itself, and sets the admin password. After that, the dashboard turns every route into a launchable app card with live health, and the Route Map draws each request from entry point through middlewares to backend. New routes use a slide-in form for HTTP, TCP, or UDP with several domains and backends, sticky sessions, and health checks. 30 middleware wizards handle authentication, rate limiting, headers, CORS, and redirects, and weighted, mirroring, or failover services can be built on their own. For day-to-day monitoring, the Certificates tab tracks expiry from acme.json, the Logs tab turns the access log into clickable analytics, the CrowdSec tab lists attacks and bans, and alerts reach Discord, Slack, ntfy, Telegram, and more. Changes to traefik.yml apply with a one-click restart, every edit is backed up locally and can be pushed to a git repository, and a lightweight agent brings remote Traefik servers into the same interface. Sign in with TOTP two-factor or OIDC single sign-on, in any of 14 languages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

With over 1,600 GitHub stars and a design philosophy that fundamentally rethinks how time tracking should work, Traggo abandons the traditional project-task hierarchy that forces your work into rigid categories and instead lets you tag time spans with arbitrary key-value pairs — project:website, type:coding, client:acme, billable:yes — enabling cross-dimensional analysis that conventional trackers cannot replicate. The Go backend compiles into a single binary that runs alongside a SQLite database and embedded web UI in under 10MB total, consuming approximately 50MB of RAM at runtime and starting in seconds on even the smallest VPS. Tags are the fundamental data model: create any tag key with any set of values, then apply multiple tags to each time span simultaneously to track by project, client, task type, energy level, or any other dimension your workflow demands. Customizable dashboards render pie charts, bar charts, and line graphs from tag-aggregated data, letting you visualize time distribution across any combination of dimensions over configurable date ranges. The calendar view displays time spans as colored blocks across days and weeks, while the list view provides chronological entry browsing with inline editing. Multiple themes including light and dark modes adapt the interface to personal preference, and simple user management with role-based access supports small team deployments. Docker deployment runs a single container exposing port 3030 with multi-architecture support for amd64, arm64, and arm v7. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

From the first rack to the last circuit, Nautobot is the open-source network source of truth that records what your network should look like and runs automation against it. Built-in models cover locations, racks, devices, interfaces, cables, VLANs, VRFs, IP prefixes, circuits, and contacts, so one searchable record replaces the spreadsheet and the wiki. Teams encode their own standards with custom fields, user-defined relationships, computed fields, and validation rules. Config contexts attach JSON or YAML data, such as syslog servers, to devices by location, role, platform, or tag. Jobs run your own automation code from the web UI, REST API, or command line, on a schedule, or through hooks when an object changes, with approvals and logs built in. Query the data over REST or GraphQL, and let the GraphiQL editor autocomplete a device and interface query you can save inside Nautobot. When an object is created, updated, or deleted, webhooks notify outside systems, with Jinja2-templated bodies and HMAC SHA-512 signatures. Git repositories can carry export templates, Jobs, and config contexts too, so YAML data and Jinja2 templates get pull request review before Nautobot syncs them. Open-source Apps add Golden Configuration for config backup, compliance, and remediation, Device Lifecycle for hardware tracking, SSoT for syncing other systems, and ChatOps. Object permissions and change logging keep a shared instance auditable. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Documents, tables, files, chat, and video meetings share one workspace in atomic.place, and AtomicServer is the part you host yourself so a team can edit together while the data stays on a machine it controls. Documents are collaborative rich text with comments, icons, and cover images, tables enforce a strict schema with keyboard navigation and copy and paste, and any table can switch to a kanban, calendar, dashboard, or timer view. Templates start an issue tracker, a CRM, a project task list, or a time tracker. Live cursors, typing indicators, and presence avatars show who is working where, group channels carry attachments, replies, and search, and an infinite canvas can be drawn on together. Every write is a signed commit, so a full history is kept. Read and write rights follow the resource hierarchy, and invite links bring people in. Websites are designed in the browser, published in one click, and rolled back to any earlier version. Custom classes and properties come from the Ontology Editor, small apps are plain JavaScript screens over the same data, and AI features work with any model through OpenRouter or a local Ollama and support MCP. Typeahead search suggests results as you type. A REST API answers in JSON-AD, Turtle, or JSON-LD for automation, and export and import commands write and read JSON-AD backups. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

uMap turns OpenStreetMap into a personal mapmaking canvas: draw markers, lines and polygons in the browser, layer your own data over detailed street maps, and embed the finished map in any website. Each map is built from data layers you can style independently, choosing marker shapes, colors, icons and popups that show names, descriptions, photos or videos when clicked. You can sketch points of interest by hand or batch import whole datasets in GeoJSON, GPX, KML or OSM format, then let clustering group dense markers or a heatmap reveal where things concentrate. Backgrounds come from a choice of OpenStreetMap based tile layers, so the same map can sit on a street plan or a cycling map depending on the audience. Finished maps embed with a snippet of HTML, stay interactive inside the page, and can be downloaded or shared by link with read only access for viewers. Permissions decide who owns, edits or only views each map, and with real time collaboration switched on, several editors can draw on the same map simultaneously and watch each other's changes appear live. A slideshow mode turns layers into a guided story, stepping viewers through places in order with text and media attached to each stop. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Alf.io handles the complete conference and event lifecycle from ticket distribution through check-in to financial reporting, built for organizers who refuse to surrender attendee data to third-party ticketing platforms like Eventbrite or Tito. Built on Java 17 with Spring Boot and PostgreSQL with row-level security policies, the project has earned over 1,500 GitHub stars from privacy-conscious event organizers across Europe and beyond. Payment processing supports Stripe for credit cards, Mollie for iDEAL, Bancontact, KBC/CBC, and Przelewy24, plus Revolut, PayPal, bank transfers, on-site collection, and configurable custom offline payment methods with localized instructions. Multi-tier ticket categories enable early bird, VIP, standard, and free registrations with promotional codes, group discounts, and waiting lists that automatically notify next-in-queue when cancellations occur. Customizable registration forms collect attendee data beyond standard fields, while EU VAT management validates tax IDs through the VIES web service and supports Italian e-invoicing with automatic PDF invoice generation attached to confirmation emails. The Alf.io Scan mobile app for iOS and Android performs QR code check-in at venue entrances, and the Alf.io-PI project provides Raspberry Pi-powered offline-capable check-in stations that form encrypted clusters for high-throughput badge printing at large events. Apple Wallet integration delivers digital passes via PassKit. The extensions system integrates with CRMs, accounting platforms, Slack, Telegram, and Mailjet. Multi-language support covers nine languages. Deploy via Docker with PostgreSQL. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPLv3 licensed.

A self-hosted front door for apps that live on home labs, office LANs, and private clusters, Wiredoor publishes them to the internet without opening a single inbound port on the private side. The Wiredoor CLI on each remote machine dials out to the server over an encrypted WireGuard tunnel. Web apps and APIs are routed by domain and path, WebSocket traffic included, while TCP and UDP services such as SSH or Redis get a public port of their own. Public domains receive Let's Encrypt certificates, internal names fall back to self-signed ones, and Cloudflare or GoDaddy credentials let the server create DNS records itself. Any web route can demand OAuth2 sign-in with an email allow list and a few open paths, and every protocol accepts IP allow lists. Gateway nodes stretch one tunnel across a Docker network, Kubernetes cluster, or private subnet, so a single link serves many backends. Services can be switched off or given an expiry such as 30 minutes, 2 hours, or 1 day. The dashboard shows which nodes are connected and whether their services are enabled, while the CLI creates, enables, and disables services from a terminal. Optional Prometheus and Grafana views chart traffic and tunnel peers, and CrowdSec can block abusive addresses. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Organizations deploying multiple large language models across departments use DEEIX Chat as their centralized AI workspace for model routing, multimodal conversations, document retrieval, MCP tool execution, and usage governance. Administrators connect upstream channels across OpenAI, Anthropic, Google Gemini, xAI, and OpenRouter protocols while configuring route priorities, traffic weights, and automatic circuit breaking from a unified control plane. Team members switch models mid-conversation, branch message threads, adjust reasoning effort, and generate images or video without managing individual API keys, or optionally bring their own provider keys under admin policy rules. Uploaded PDFs, spreadsheets, and images undergo OCR and semantic chunking so users can attach personal or shared knowledge bases directly to chat sessions with traceable retrieval evidence. Interactive responses render live HTML, SVG, Mermaid diagrams, KaTeX math, and stateful parameter sliders inside a sandboxed preview pane alongside the conversation. Built-in support for Streamable HTTP Model Context Protocol servers lets users discover and invoke external tools with per-message execution limits and full call inspection. Integrated permission groups, OIDC single sign-on, TOTP two-factor authentication, token and per-call billing ledgers, and audit logs give operators complete visibility over usage and spend. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

When cybersecurity instructors and competition organizers host Capture The Flag tournaments, GZCTF orchestrates isolated per-team challenge containers, dynamic anti-cheat flags, and live exponential scoreboards from a single web platform. Event administrators can configure four distinct challenge modes covering static attachments, team-specific dynamic attachments, shared static containers, and isolated dynamic containers where unique flags are injected into each team's environment at launch. A customizable exponential scoring engine adjusts point values automatically as more teams solve a problem while awarding first, second, and third blood bonuses to top contenders. Built-in flag-sharing detection monitors every submission in real time, flagging suspicious cross-team flag reuse alongside live event streams and container logs. Participants can group into divisions, track their ranking trajectory on interactive score timelines, and upload post-game writeups directly into the portal for organizer review and batch archiving. Built-in network proxying forwards challenge traffic over WebSocket tunnels with optional packet capture so referees can audit exploit payloads during active matches. Multi-language localization, customizable branding, invitation gates, and email domain restrictions adapt the portal to university courses, corporate security drills, or international tournaments. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

MailCheap is a newsletter app you host yourself that writes, sends, and publishes your issues while charging you only for the emails you actually send, not for subscribers who never open anything. Write in an editor with slash commands, images, and content boxes, or send Markdown and HTML emails through the API, then work through a pre-send review that flags subject, preview text, unsubscribe link, and sender problems first. Bring your audience with you: CSV exports from beehiiv, Substack, Mailchimp, Kit, MailerLite, Buttondown, Ghost, and EmailOctopus import with each reader's status and signup date intact. Imports clean themselves, dropping invalid, misspelled, duplicate, throwaway, and spam-trap addresses, and a server-wide never-email list keeps known bad addresses out of every future import, signup, and send. Sending protects your domain: new contacts receive issues in paced steps, sends pause when bounce or complaint rates climb, and Gmail spam rates are watched daily. Every issue becomes a page on your newsletter's website, with a signup form, author page, share images, and a sitemap. Run up to three newsletters per account, each with separate contacts and campaigns, and follow subscribers over time with open and click reports by inbox provider. AI agents can do anything the dashboard can through the MCP server, and scripts get the same reach through the REST API, with sending marked irreversible so agents ask first. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

When shuffle algorithms start feeling sterile, Subwave transforms your self-hosted Navidrome or Subsonic music library into a live 24/7 personal internet radio station hosted by AI DJ personas. Every listener tunes into a single shared Icecast broadcast simultaneously. Curated tracks play alongside spoken station idents, local weather reports, news briefings, time checks, and track introductions. Want to hear something specific? Listeners submit plain-language song or mood requests directly from the web player, native mobile and desktop apps, or an MCP client, and the on-air DJ weaves those selections into the rotation. Operators staff up to 24 distinct DJ personas with guest co-hosts, programme a 24x7 weekly show grid with multi-hour episode arcs, and customize between-track skills from the browser admin console. Acoustic analysis measures BPM, musical key, loudness, vocal ranges, and track endings so crossfades and voice ducking sound like a studio broadcast across MP3, Opus, AAC, and lossless FLAC streams. An interactive Library Observatory maps every analyzed track by genre and energy. Runtime-swappable LLM providers (Ollama, OpenAI, Anthropic, and OpenRouter) and six local or cloud TTS engines keep voices flexible. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Instead of relying on third-party cloud trackers to keep watched history aligned across Plex, Jellyfin, and Emby, WatchState synchronizes playback state and watch progress directly between your own self-hosted media servers. Household administrators can map multiple family members across independent backend accounts using isolated user identities, configuring either one-way mirroring from a primary server or full many-to-many synchronization across every connected instance. A unified generic webhook endpoint captures play, pause, stop, and watched events from Plex, Tautulli, Jellyfin, and Emby for near-instant state propagation, while scheduled background import and export tasks reconcile any missed updates automatically. When libraries grow across multiple servers, the built-in Media Health diagnostic engine audits the database for external GUID conflicts, duplicate file references, metadata disagreements, weak matches, and missing local files, complete with exportable reports and per-record action hints. Users can also search backend metadata, inspect detailed item event logs, and export portable JSON backups of their entire watch history for safe server migrations. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

OpeniLink Hub turns a personal WeChat account into a programmable bot platform, with a web console, multi-bot management, and a one-click app marketplace that wires WeChat to Lark, Slack, GitHub, Notion, and twenty other services. Bind accounts by scanning a QR code, then watch every bot's status, expiry window, and message flow from one dashboard. Install marketplace apps without writing code: Lark gains 34 AI-callable tools across calendars, docs, tasks, and meetings, while GitHub brings 36 tools for issues, pull requests, and Actions. Every incoming message fans out in parallel over WebSocket for millisecond pushes, Webhook callbacks to your own servers, and an AI channel that answers through any OpenAI-compatible API. Message tracing follows each message from receipt to delivery, showing exactly which hop stalled when something breaks. Passkey sign-in with fingerprint or hardware keys keeps the console protected, with GitHub and LinuxDo OAuth as alternatives. Reminders, expense tracking, currency conversion, RSS digests, and cron-scheduled pushes run as installable apps, and expiry reminders warn you before the 24-hour reply window closes. Build your own integrations with official SDKs for Go, Node.js, Python, PHP, Java, C#, and Lua, or expose local CLI commands as chat-callable tools with the Runner app. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

MCPJungle puts every MCP server your AI tools use behind one endpoint, so Claude, Cursor, Codex, and your own agents all connect to a single gateway instead of a tangle of per-client configurations. Register remote HTTP servers and local STDIO servers once, and their tools, prompts, and resources become discoverable through the gateway in one place. Tool groups expose curated subsets at their own endpoints, so a coding agent sees only the tools its job needs instead of hundreds of irrelevant ones competing for context. The dashboard gives you a visual registry of servers, tools, and groups for everyday management, while the CLI and REST API cover scripting and automation. Development mode runs with zero authentication for a personal setup; enterprise mode adds per-client tokens that allow-list exactly which servers each client may reach. User accounts and manual server initialization give teams a governed shared deployment, with OpenTelemetry metrics showing what clients call and how the gateway performs. Upstream servers can authenticate with bearer tokens or OAuth, so credentials stay centralized in the gateway rather than copied into every client config. Registry data persists in a local file for solo use or in PostgreSQL when the gateway becomes shared team infrastructure. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MPL-2.0 licensed.

TapMap draws a computer's live network connections on an interactive world map, so you can watch which applications are talking to which services, where those services sit, and what normal looks like for that machine. A local pipeline scans active sockets, extracts the remote addresses, and enriches them with geolocation from databases stored on the machine itself. Every connection carries the owning application or process, its network operator, and the operating system's verification status for that app, and places that share a location are highlighted when connections overlap. The same view lists local open ports, both TCP listeners and bound UDP sockets, established services on your LAN, and public services whose location could not be mapped. A rolling 30-day history turns raw connections into awareness: an Insights panel surfaces new applications, providers, countries, and ports, plus the most frequent activity, while a Significant Connections log records first sightings and failed verifications. A Daily Activity Report goes further, sorting applications into seen-once, occasional, recurring, and stable patterns, analyzing provider concentration, and charting country activity with detailed timelines. New significant connections can raise a desktop notification or publish to an MQTT broker you configure. Nothing is sent anywhere by default: processing happens locally, with no telemetry. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.