Nimbus is a self-hosted homelab dashboard that turns your scattered pile of services into a polished, organized command center with real-time health monitoring for every endpoint you care about. The dashboard displays live status cards for each registered service, tracking response times down to the millisecond and graphing uptime history so you can spot degradation before it becomes an outage. Health checks run on configurable intervals with smart self-signed certificate handling, meaning your internal services with self-issued TLS do not trigger false alarms. Multi-user support comes standard: local accounts authenticate via JWT, while OAuth2 integration with Google, GitHub, and Discord lets team members sign in with existing credentials. Role-based access control and a built-in admin panel give you granular authority over who sees what. Each user personalizes their view with custom backgrounds, light or dark mode, accent color themes, and drag-and-drop service tile arrangement. Services group into named categories and cards resize to fit your preferred layout, with both grid and list view modes available. Prometheus metrics export feeds your existing Grafana stack, and webhook notifications alert you instantly when a service goes offline. Custom service icons upload directly or auto-fetch from the Dashboard Icons collection. Zero-config Docker deployment gets you running in under 30 seconds with a single docker-compose command. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Enterprise security stacks assume an enterprise budget; Wildbox assumes a server you already own. It runs your whole security operation as a set of cooperating services behind a single HTTPS gateway: threat intelligence collectors pull indicators from seven public feeds on a schedule, starting with abuse.ch's Feodo Tracker, and every indicator is searchable in one place. Fifty-two security tools sit behind one API, covering DNS, TLS, email security, headers, and port analysis. The cloud posture service runs 22 configuration checks against your live AWS accounts and keeps each scan's report, while the vulnerability service inventories your assets, prioritizes findings by risk, and tracks them through remediation with SLA checks and alert rules. When something needs doing, YAML playbooks execute response workflows as background jobs, and the agents service writes Claude-generated threat-enrichment reports for suspicious indicators when you give it an API key. An osquery-based sensor streams endpoint telemetry from your hosts into the platform, kept separate per team. Users, teams, roles, and scoped API keys live in the identity service, and the backends accept nothing that did not arrive through the gateway, so your security data never leaves hardware you control. Optional Compose profiles add n8n automation and Prometheus monitoring. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

SoftJL turns a system description into the UML diagrams, test cases, and Word specifications a software project is supposed to produce, and keeps every artifact traceable back to the requirement it came from. Describe your system in chat and confirm the extracted requirement rules, then work through feasibility analysis with system context, business and system flows, and implementation options weighed by cost, benefit, and risk. From the confirmed rules it builds requirement and design models: functional structure, use cases, domain concepts, architecture, design classes, database and deployment diagrams, all editable as PlantUML with SVG export. Tests follow the same thread, with normal, exceptional, and boundary cases mapped to requirement rules in coverage and traceability matrices that show exactly which requirements lack design or test support before you submit. When a requirement changes, dependencies and update status point at the models, tests, and documents that need review, instead of leaving you to rediscover them by hand. Specifications generate from the saved models as versioned, editable DOCX files, a feasibility report, a requirements specification, and a design description, ready to compare against the diagrams and revise. An optional read-only MCP endpoint lets a coding agent read your designs and acceptance criteria, and the whole workspace runs on your own OpenAI-compatible model service. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Hunting for the hole is only half the job, because a scanner alert nobody believes wastes more time than the bug itself. Add a domain, CIDR, or bug-bounty scope and Reconner builds the map first: passive and active subdomain enumeration, live HTTP probing and fingerprinting, JavaScript analysis that digs endpoints, secrets, and API keys out of bundles, plus parameter and hidden-param discovery. Then it attacks what it mapped with a context-aware engine covering reflected, stored, and DOM XSS, SQL, NoSQL, SSRF, IDOR, LFI, SSTI, XXE, injection, and open redirects, and every candidate has to survive differential, out-of-band, or control-based proof, re-verified before it is ever reported. Blind issues are not dropped either: OAST callbacks catch out-of-band SSRF, RCE, SQLi, and SSTI that never respond inline. Networks get the same treatment, with port scanning, service detection, network-CVE checks, and IP-camera auditing. Findings land in a live dashboard streamed over WebSocket, with an attack-path view, coverage ledger, monitoring diffs, and HTML, Markdown, and PDF reports, while Telegram can alert you and even start, stop, or resume scans remotely. Run it only against assets you own or are authorized to test; behind a VPN and TLS it becomes your private proving ground. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Your cycle history is among the most personal data you will ever record, and Ovumcy keeps it on a server you control instead of a tracker's cloud. Log period days, flow intensity, symptoms, and free-form notes in seconds from any browser, and define your own custom symptoms when the preset list misses something you feel. The calendar view lays out your month with predicted period, ovulation, and fertile-window days marked, while statistics views surface cycle length trends and patterns across months. Predictions come from your own logged history, refined when temperature or cervical-mucus entries sharpen the estimate. Reminders reach you three ways: a dashboard banner before an expected period, a webhook ping to your own ntfy or Gotify server, or a private read-only calendar subscription that drops estimates into the calendar app you already use. Install it to your phone home screen and it opens like a native app, in English, Russian, Spanish, French, German, or Italian. Export the full history as CSV or JSON whenever you want a backup or a change of tools. Optional OIDC sign-in and TOTP two-factor authentication protect access, and the app makes no analytics or telemetry calls at all. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Usulnet packs container management, Trivy security scanning, Nginx reverse proxy, scheduled backups, WireGuard VPN, firewall rules, and multi-node orchestration into a single 70MB Go binary with zero external runtime dependencies. Every module ships in one download with no paid tiers, no telemetry, and no edition gating. Container lifecycle management covers creation, start, stop, restart, pause, kill, and removal with bulk operations, real-time resource statistics, filesystem browsing, and settings editing. Trivy integration scans images and running containers for CVEs with severity scoring, generates SBOMs, and validates CIS benchmarks. The multi-node architecture supports standalone, master, or agent modes where agents connect over NATS JetStream with mTLS encryption, enabling remote Docker host management from a central dashboard. Reverse proxy configuration handles Nginx with automatic Let's Encrypt certificates, TCP/UDP stream proxying, access lists, and dead host detection. Backup operations capture container volumes and Compose stacks on configurable schedules with retention policies and full restore capabilities. A built-in application catalog provides 60+ one-click templates for common services. JWT license validation uses an RSA-4096 public key embedded in the binary, requiring no call-home and working entirely offline. For teams tired of maintaining separate tools for each infrastructure concern, Usulnet collapses the entire stack into a single point of management with Docker Compose deployment alongside PostgreSQL, Redis, and NATS.

The social preview cards shown when links hit Twitter, LinkedIn, Slack, or Discord, generated on the fly: Oxigen is a small Go service for dynamic Open Graph images, no designer required per page. Instead of exporting static images per page, you compose a card once and drive it with parameters: title, author, website, logo, background image, and background dimming all arrive as URL query arguments, so your og:image meta tag simply points at the Oxigen endpoint with the page's own values substituted in. Every blog post, product page, and doc gets a branded, correctly sized preview generated on the fly. A built-in web UI covers interactive composition - tweak the text and imagery, watch the preview update, copy the resulting URL - while the same rendering path serves programmatic API use from static site generators, CMS templates, or build pipelines. Rendering is pure Go using the gg 2D graphics library, freetype fonts, and the imaging package, built on the kyoto framework by that project's author. Deployment is one stateless container on port 80 with no database and no external dependencies, so instances scale and restart freely.

Your team chat can be one executable on your own server: Campfire Rust runs rooms, direct messages, attachments, and search as a single binary that replaces the whole Ruby, Puma, Redis, Resque, and Thruster stack. Create rooms with access controls for projects, departments, or a private board discussion, and keep direct messages beside them for quick questions. File attachments arrive with previews, mentions pull the right person into a thread, and search finds the decision someone made months ago. Web Push notifications reach browsers and phones, so a quiet room still finds its people when it matters. Chatbots connect through a simple HTTP API for sending and receiving messages and attachments, which makes Campfire a home for build alerts, deploy notices, and support pings. Existing Campfire installs upgrade in place because the Rust binary reads the same SQLite database, storage layout, and signed cookies, with no data migration and no mass sign-out. Automatic TLS with Let's Encrypt certificates, HTTP/2, and Action Cable-compatible WebSockets are built in, and the whole system works on air-gapped networks that never touch the internet. Run it as your primary chat, as a backup for the day a hosted service goes down, or as a walled garden for executives and events. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Somewhere in your house, a presenter is introducing the next record, and that presenter is a language model running on your own server. Deadair builds you a real radio station rather than another playlist: it picks records from your Navidrome, Jellyfin, Emby, or Plex library, or from Spotify, YouTube Music, Pandora, and Apple Music, writes what the host says between songs, speaks it in that host's own voice, and broadcasts the result as one shared live stream over Icecast, with no skip button and the same show for every listener. From the console you steer it in plain sentences: tell it "rap like Snoop Dogg" and the next hours programme themselves to that brief, or ask why the record on air was chosen and get an answer. The forward lineup runs several hours deep, visible and editable, and nothing reaches air until its audio is already on the machine, so the stream never stutters waiting on a download. Words and voice are separate choices, swapped live in Settings: break-writing can run on a hosted model while a local Kokoro or Chatterbox voice reads it, and a station with no model at all still talks. Twenty-seven bundled plugins cover music sources, metadata, news, weather, and speech, and third-party plugins install from the console. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

NarraLume is a writing studio for long novels where the AI proposes and you dispose, so a book stays yours across tens of thousands of words. Everything lives around the story bible: your stated intent, outline, entities, confirmed facts, relationships, chronology, and foreshadowing, kept as the single source of truth that planning, drafting, and review all read from. You can write chapters by hand in the studio, save versions and comments, ask for a selection edit, or delegate a chapter, a run of chapters, or a whole quick-creation plan to a model; whatever comes back arrives as a candidate with diffs, never as silent edits to your manuscript or canon. Review findings come with evidence you can accept, reject, or mark as false positives, and when generated prose collides with a locked fact the task stops and waits for your ruling instead of improvising around it. The run center keeps every AI job's steps, model calls, and checkpoints recoverable, the long-form lab searches story memory and previews plot impact without touching the book, and delivery ends with quality checks, exports, snapshots, and full-library backups. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Platypus gives a whole team always-on AI agents that reason, call tools, and keep working on your own servers while everyone is offline. Build an agent once by choosing a provider and model, writing its instructions, and capping its tool-calling loop, then reuse that preset across chats and scheduled runs. Agents load reusable Skills on demand and delegate specialist work to sub-agents that appear to the parent as tools. Connect local and remote data through Model Context Protocol servers, or expose an agent to outside agents and chat platforms through A2A endpoints with a token per client. Triggers run agents on a cron schedule, as one-off jobs, or when workspace events such as a card moving on a board occur, and every run records its result. Kanban boards give agents work they can move and update themselves, while notifications and HMAC-signed webhooks push board and workspace events into your own systems with filtering and retries. Facts and preferences are extracted from conversations in the background and injected into future chats, so returning users are remembered. Sandbox backends give agents shell and filesystem access inside an isolated per-workspace environment instead of the host. Organizations and workspaces keep each team's agents and data separate, and blueprints package shared agents, skills, MCP servers, and providers so a new workspace starts pre-equipped. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Lalabase is project management built for developers who work with clients, putting tickets, time tracking, documentation, and meetings in one workspace instead of five separate tools. Each client gets an organisation with its own projects and its own access, and roles decide exactly what clients can see. Tasks run as a list or a board with the statuses, priorities, and fields you define per project, rather than the workflow a vendor chose for you. Time tracking records several sessions per ticket, each billable on its own, with exports that go straight into the invoice. Documentation lives beside the work: notes and documents sit in the project, and a folder in your GitHub or GitLab repository becomes the project's docs automatically. Meetings keep their transcript, an AI summary, and the tasks that follow from what was actually said. When you need an answer, the AI assistant takes one question across tickets, comments, documents, hours, and meetings, and it cites the ticket, page, or conversation every answer came from. It even reads your repository's indexed code structurally, so questions about what is implemented get answered against the code. The assistant stays off until you enable it with your own provider key or a model in your own network. An MCP server and REST API let your own agents list, create, and update tickets, comment, and log time. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Monitoring and safeguarding Docker infrastructure without heavy enterprise software overhead is the primary mission of Statainer, an open-source management control center for container hosts. System operators inspect live CPU loads, memory consumption, network throughput, and disk I/O metrics across individual containers or comparative top-ranking charts. The interface groups containers by Compose projects, enabling administrators to start, stop, or restart entire application stacks and inspect real-time log streams without opening SSH sessions. The built-in Update Manager detects available image tags, executes single-click container updates, and maintains persistent deployment history with automated rollback capabilities for failed recreations. Custom alert configurations trigger instant notifications to Telegram, Discord, Slack, Pushover, or generic webhook endpoints whenever resource thresholds are breached or container health states change. Developers can provision scoped API keys with token authentication to automate container state transitions and export performance telemetry into custom monitoring workflows. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

AsoBeast keeps score of your app in the App Store and Google Play, so you always know which keywords you rank for, which ones moved, and what to fix next. Paste a store URL and tracking starts on import: rankings are checked daily in your home storefront and any other market you add, and every keyword is scored for popularity, difficulty, and opportunity so you can tell a winnable term from a vanity one. The dashboard leads with your keywords in the top 10, this week's movement, and an Action Center that turns the data into specific moves, like defending a keyword where two new rivals just entered the top 10, with the reason and the fix spelled out beside each item. Competitor listings are diffed over time, so a rival's new title, subtitle, version, or release notes show up as a before-and-after entry instead of a surprise. Metadata snapshots keep the raw store payload, localization and keyword field analysis shows wasted words, reviews feed the audit score, and the same data is exposed to your AI tools through the built-in MCP server. Registration closes itself once your owner account exists, and store requests run from your own server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Proval is a self-hosted AI code review agent that reads every pull request on your GitLab, Forgejo, or GitHub server and posts a consolidated, severity-grouped review with inline comments, using a model you run yourself. When a pull request gets a meaningful push, a planning agent groups changed files into review units and dispatches specialist sub-agents in parallel, each exploring the codebase so cross-file issues surface. A writing agent merges their findings into one review, with comments on the affected lines, including multi-line ranges. Reply to any Proval comment and it reads the thread context and answers, and it works on issues too, greeting new ones and answering follow-ups on every message or only when mentioned. Choose per repository whether reviews run on first push only, every push, or not at all, skipping drafts until they are marked ready. Every review, reply, and issue comment is logged with its token usage, so each model's cost shows in the dashboard instead of hiding in an API bill. Your code is never stored; review context goes only to the LLM endpoint you configure, whether that is a cloud API or a local Ollama or llama.cpp server on your own network. Connect GitLab or Forgejo with an access token and webhooks, or GitHub through a GitHub App; Gitea and Codeberg use the same Forgejo-compatible path. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Imp runs large AI chat models privately on one NVIDIA RTX 50 or RTX PRO graphics card, exposing them through OpenAI and Anthropic compatible APIs plus a built-in browser chat. Start it with a single Docker command, point it at a model, and the chat opens in your browser with saved conversations and a live readout of generation speed. Coding agents such as Claude Code and Codex connect by changing one base URL, so your editor talks to the model on your own hardware instead of a rented cloud endpoint. Tool calls, structured JSON output, streaming responses, and reasoning models all work over the wire, and requests can be protected with an API key, per-IP rate limits, and concurrency caps. Load GGUF files you already have or NVFP4 and FP8 SafeTensors checkpoints straight from Hugging Face with no conversion step before the first answer. When a model is bigger than the card, mixture-of-experts weights stay in system RAM while the busiest experts are cached on the GPU, so a 123.6 GiB model still answers from a 32 GB card. Supported models can also read images alongside text, and tokenize, health, and model listing endpoints make the server easy to wire into scripts and monitors. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

37Studio is a self-hosted AI video studio and social media desk that turns a short brief into on-brand videos, posts them to nine social platforms, and drafts replies to the messages that come back. Paste a company website and it builds a brand library of logos, photos, fonts, and colours, plus a knowledge base every later video and reply draws on. An editor agent builds each video as an animated composition, checks its own rendered frames, and takes revision requests in plain words. The same workflow yields hook reels, captioned clips, explainers, podcast clips, promo ads, and thumbnails, and any finished video can become a template. A two-hour recording becomes a shelf of short clips: transcription runs locally in about 100 languages at no cost, and YouTube or Drive links import directly. Publishing reaches Facebook Pages, Instagram, YouTube, TikTok, LinkedIn, X, Pinterest, Bluesky, and Mastodon in one action, now or scheduled, each with its own caption. Autopilot goes further: state a content plan in one sentence and a fresh video is made before every slot, waiting for one-click approval. Messenger, Instagram, and WhatsApp messages and social comments land in one inbox, with replies drafted in the customer's language under rules each brand sets. Exact AI spend shows on every project, and an MCP server lets your own AI tools run the studio. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Papyra gives you a calm, private home for notes that stays as easy as sticky notes while quietly linking everything together like a wiki. Cards pin, colour, and drag into place on your desk, and opening one drops you into an editor where slash commands insert headings, checklists, tables, or maps without leaving the keyboard. Type two brackets to link another note, and backlinks gather the other direction automatically, following the note even if you rename it. Notes save themselves, and every earlier version is kept, so you can scrub back through history and restore the draft you actually wanted. Sharing a note lets several people type in it together with visible cursors, comments in threads, and mentions that bring the right person in. Private notes lock behind a PIN or your fingerprint and sit encrypted on disk, while a daily journal page collects the day with a mood and a calendar to browse the year. Search covers notes, to-dos, and attachments with highlighted matches, and image text and audio transcripts can join the index. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.