Fleet lets IT and security teams query every device in their organization like a SQL database, using osquery to surface installed software, running processes, configurations, and vulnerabilities within seconds across macOS, Windows, Linux, iOS, Android, and ChromeOS. The Go-based server exposes a web console and REST API for centralized device management, with MDM capabilities built on nanoMDM for Apple device enrollment, configuration profiles, and remote lock or wipe. Vulnerability management cross-references installed software inventories against NVD and OVAL CVE databases, automatically flagging known vulnerabilities with severity scores and remediation guidance. Software deployment handles OS updates using Apple Declarative Device Management, Windows Update, and custom installer packages distributed through S3-compatible storage. A GitOps workflow enables infrastructure-as-code management where device policies, osquery queries, and configuration profiles live as YAML files in Git repositories, with CI/CD pipelines pushing changes through the fleetctl CLI. The fleetd agent bundle includes osquery for telemetry, Orbit for version management, and Fleet Desktop providing end users a menu bar status indicator. Integrations connect to Snowflake, Splunk, Elastic, Jira, Zendesk, Vanta, and GitHub Actions for automated compliance reporting. CIS benchmark policies verify security baselines across operating systems. Deployment requires MySQL for persistence and Redis for caching, running as Docker containers or on Kubernetes. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Modern engineering teams and busy households deploy Octop to run private, autonomous AI agents equipped with persistent memory workspaces, scheduled cron jobs, and direct browser automation. Users can orchestrate specialist agents tailored for software development, IT operations, content generation, and system diagnostics through an interactive React dashboard. The platform connects directly to Discord, Feishu, DingTalk, and WeCom, allowing team members to delegate complex tasks without leaving their everyday messaging apps. An integrated remote desktop and browser control engine lets agents navigate websites, capture screenshots, fill forms, and operate graphical software autonomously. Administrators can assign distinct MBTI personality profiles to agents, establish granular role-based permissions, configure scheduled cron workflows, and integrate custom Model Context Protocol servers for external tool access. Long-term memory persists across conversations through dedicated workspace files, ensuring contextual continuity whenever switching between underlying language models or team collaborators. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Real LibreOffice document engineering in the browser: Collabora Online is built by the company employing much of the former SUSE LibreOffice team - not a reimplementation. This deployment runs CODE (Collabora Online Development Edition), the collabora/code server that renders and edits documents entirely server-side while browsers get high-fidelity WYSIWYG output, so layout and formatting survive round-trips that break lesser converters. Four editors ship in one container: Writer for text documents (comments, track changes with comparison and restoration, form handling), Calc for spreadsheets (advanced formulas, macros, pivot tables, per-user sheet views, server-enforced cell protection), Impress for presentations, and Draw for Visio-class diagrams. Format compatibility spans DOCX, XLSX, PPTX, the ODF family, PDF, and dozens more - including Visio and Publisher import. Real-time collaborative editing supports multiple simultaneous editors with visible cursors and commenting. The architectural point: documents are processed on your server and never leave it, which is why Collabora is the engine behind Nextcloud Office and integrates with ownCloud, Seafile, and any WOPI-speaking host - or embeds in your own application via the SDK. An admin console monitors sessions and memory. For organizations that need Google Docs-style collaboration with actual data sovereignty, this is the reference open-source answer.

The deep end of self-hosted recipe management: Tandoor Recipes is a Django/Vue application that replaces Paprika, AnyList, and ad-choked recipe sites with a database you control. Import is where most people start: paste any URL and Tandoor scrapes schema.org markup for ingredients, instructions, images, times, and nutrition; bulk-paste URLs for batch import; or migrate wholesale from Mealie, Paprika, Nextcloud Cookbook, Pepperplate, and other managers with built-in importers. The structured recipe editor tracks ingredients individually, which is what powers everything downstream: full-text search with trigram similarity, a "what can I make with what's in the fridge" ingredient search, automatic nutrition via OpenFoodFacts, and shopping lists that merge duplicate ingredients across recipes, convert units, scale by servings, and sort by your supermarket's actual aisle layout. The weekly meal planner is drag-and-drop, feeds shopping lists automatically, exports to your calendar, and shows a nutritional summary for the week. Multi-user support comes with a granular permission system - shared household cookbooks, private recipes, even secret ones - and shopping lists sync in real time so two people can shop simultaneously. A full REST API integrates with Home Assistant and Grocy. For households serious about cooking, Tandoor's depth is unmatched.

Pretix powers thousands of events and millions of ticket sales through a fully brandable ticket shop with interactive seating plans, 30+ payment providers, and a mobile check-in app for venue entry management. With over 2,400 GitHub stars, it delivers what organizations need when they demand full control over attendee data and revenue rather than surrendering margins to Eventbrite or Ticket Tailor. Built with Python and Django on PostgreSQL with Redis and Celery, the ticket shop adapts to your colors, logo, and domain with responsive design. The graphical seating plan editor handles everything from small cinemas to large stadiums, letting buyers choose seats mapped to pricing categories. Payment providers connect through plugins including Stripe, PayPal, Mollie for iDEAL and Bancontact, SEPA direct debit, and bank transfer with automatic CSV import for payment matching. The voucher engine generates bulk discount codes with usage limits, quota reservations, and automated email distribution. Waiting lists automatically offer released tickets to the next registrant with expiration deadlines. A built-in mini-CMS hosts event descriptions, terms of service, and static pages directly in the ticket shop. Customer accounts enable repeat buyers to check out faster across events. The pretixSCAN mobile app performs QR code check-in on Android and iOS with offline capability. Embeddable JavaScript widgets integrate the shop into any website. Plugin architecture extends functionality with output formats, analytics, and Apple Wallet passes. Deploy via Docker with the pretix/standalone image alongside PostgreSQL and Redis. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

FalkorDB is the first queryable property graph database to leverage sparse adjacency matrices and linear algebra for graph traversal, replacing traditional pointer-chasing with GraphBLAS-accelerated computation. Originally the RedisGraph engine, it was relaunched as FalkorDB in 2023 and rewritten from C to Rust in 2026 for improved memory safety and performance. The database supports the OpenCypher query language with proprietary extensions, translating queries into linear algebra expressions that exploit AVX hardware acceleration. Indexing options include full-text search, vector similarity for embedding-based retrieval, and range indexing, while connectivity supports both the RESP protocol for Redis clients and the Bolt protocol for Neo4j-compatible tooling. The GraphRAG SDK enables ingestion of documents in text, PDF, and Markdown formats into knowledge graphs, with schema-guided entity extraction, hybrid retrieval combining vector and graph traversal, relationship expansion, and cited answers for LLM applications. Official client libraries cover Python, Node.js, Java, Rust, Go, PHP, and C#. Multi-tenant support handles over 10,000 concurrent graphs with zero overhead and full isolation. Docker deployment runs the falkordb/falkordb image on ports 6379 for the database server and 3000 for the built-in browser UI, with persistent volume storage and optional authentication. A production falkordb-server image excludes the browser for lighter deployments. On RepoCloud, deploy FalkorDB on a dedicated VPS with root SSH access, persistent storage for your graph data, and complete control over authentication, thread count, and memory configuration, all under the SSPLv1 license.

Airtable's spreadsheet-database model, self-hostable and open-source: that is Baserow. It presents data in a spreadsheet-style grid, but underneath each table is a real relational structure with typed fields, links between tables, filters, sorts, and multiple views (grid, gallery, form, kanban, calendar). Beyond the database core, it includes an application builder for composing pages and portals on your data, workflow automations, and dashboards. Everything is API-first: each table exposes a REST endpoint with token auth and webhooks, so it plugs directly into n8n, Zapier, or custom scripts. The stack is Django (Python) on the backend, Vue.js on the frontend, PostgreSQL for storage, with Redis for async tasks. Core features are MIT-licensed; premium features are a paid add-on. The self-hosted version has no row, storage, or API request limits - Airtable's per-base record caps and monthly API quotas simply don't exist here, and capacity is bounded only by your PostgreSQL database and disk. Existing Airtable bases, CSVs, and Excel files import directly with structure preserved, so migration doesn't start from a blank slate, and both the backend and frontend support plugins for custom field types and integrations without forking the core. For non-technical teammates the interface behaves like a spreadsheet; for engineers, the data model is the API.

Build a voice AI agent that answers calls, qualifies leads, books appointments, and transfers to a human when needed, all from a drag-and-drop workflow builder in your browser. Dograh ships as a Docker Compose stack (API, web UI, Postgres, Redis, MinIO) that you self-host on any Linux server with automatic HTTPS provisioning via Let's Encrypt. The visual workflow builder lets you design multi-turn conversation flows by connecting nodes for greetings, intent classification, tool calls, and handoffs; describe your use case in plain English and the platform generates the LLM prompt and node graph for you. Connect your own speech-to-text, LLM, and text-to-speech providers (OpenAI, Anthropic, Gemini, ElevenLabs, Deepgram, local Whisper, Kokoro, or any OpenAI-compatible endpoint) or use the built-in Speech-to-Speech mode with Gemini Flash Live and GPT-Realtime-2 for sub-200ms latency. Telephony plugs in through Twilio, Vonage, Vobiz, or Cloudonix for inbound and outbound calling, with live agent transfer when the conversation needs a human. Webhook tool calls connect to Salesforce, HubSpot, Google Calendar, Cal.com, or any REST API without writing orchestration code. The ClonedVoice feature mixes real human voice recordings for high-frequency phrases with neural TTS fallback for dynamic content, cutting costs while improving caller trust. A built-in MCP server lets AI coding agents like Claude Code or Cursor design, test, and edit workflows through natural language. Deploy on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD 2-Clause licensed.

With 11,400+ GitHub stars and active development since 2019, Gatus is the developer-oriented status page and health monitoring tool that ships as a single statically-linked Go binary in a scratch Docker image under 20 MB — deploying in seconds while monitoring your entire infrastructure across 12 protocols from a single YAML configuration file. Define health checks for HTTP, ICMP, TCP, DNS, gRPC, WebSocket, SSH, UDP, SCTP, STARTTLS, and TLS endpoints with conditions that go far beyond simple ping: evaluate response status codes, body content with JSONPath expressions, response time thresholds, certificate expiration days, DNS record values, and IP address ranges. Each endpoint supports independent alerting through Slack, Microsoft Teams, PagerDuty, Discord, Telegram, Twilio, Mattermost, Google Chat, email, Gotify, Pushover, and custom webhook providers with configurable failure thresholds and descriptions. The built-in status page displays uptime badges, response time graphs, and incident timelines with maintenance window support for planned downtime communication. External endpoints accept push-based health reports from services behind firewalls. Prometheus metrics export via the /metrics endpoint enables integration with existing observability stacks. OIDC and Basic Authentication protect the dashboard. PostgreSQL persistence stores historical uptime data. The official Helm chart supports Kubernetes deployment with liveness probes and PVC storage, while a community sidecar auto-generates endpoint configurations from Kubernetes Ingress and HTTPRoute resources. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Macro merges email, team chat, collaborative documents, task management, CRM, and video calls into one keyboard-driven application where AI agents operate across the entire workspace with shared team memory, replacing the Slack plus Notion plus Linear plus Superhuman plus HubSpot stack with a single deployment. The email module provides a multi-account unified inbox with keyboard shortcuts, shared team inboxes, and Gmail integration. Team messaging offers channels and direct messages designed for technical discussions with threaded conversations. The task system draws from Linear with board and list views tightly integrated with channels, email threads, and AI agents. Real-time collaborative documents use CRDT synchronization via Loro for conflict-free editing with Markdown-native formatting and @mention linking. A 2D canvas board embeds @links to tasks, files, and emails for visual project planning. AI agents access unified team-level memory spanning all workspace modules, taking autonomous actions across email, chat, tasks, and documents through MCP-compatible tool interfaces. Video calls include recording, transcription, and automatic logging to team memory. The CRM module tracks customers and contacts with custom properties, email synchronization, and data enrichment. Eighty-plus Rust microservices on the Axum framework handle backend operations while a SolidJS static SPA delivers the frontend with instant search and real-time collaboration. Docker Compose deployment provisions the complete service stack with PostgreSQL, Redis, OpenSearch, and FusionAuth authentication. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Unlimited agents, unlimited tickets, unlimited mailboxes, forever, on a $4 VPS - FreeScout's pricing inversion is why it became the most popular self-hosted Help Scout alternative, a PHP/Laravel help desk and shared inbox developed from scratch over eight years. The inbox deliberately behaves like Gmail or Outlook, so new support agents need close to zero training. The email-support core is genuinely complete: seamless IMAP/SMTP integration including modern Microsoft Exchange authentication, collision detection that warns when two agents open the same conversation, canned responses, auto-replies, internal notes, open tracking, starring, forwarding, merging, and moving conversations between mailboxes, phone-call logging, push notifications, and an auto-refreshing conversation list - plus screenshot pasting straight from the clipboard into replies. It's 100% mobile-friendly, fully screen-reader accessible, and translated into 28 languages. Beyond the core, an ecosystem of 100+ modules (mostly one-time $12-20 purchases) adds knowledge base, workflows with Gmail-filter-style automation rules, satisfaction ratings, time tracking, tags, custom fields, LDAP, Slack, WhatsApp and Telegram channels, and an API with webhooks - pay only for what your team needs. Web installer and updater included. AGPL-licensed.

Open-source alternative to OpenAI's Canvas — a collaborative writing and coding environment where AI agents help you draft, edit, and refine documents through an agentic architecture built on LangGraph. The dual-mode editor combines a BlockNote rich text editor for live-rendered markdown with a CodeMirror-based code editor supporting syntax highlighting across multiple programming languages, letting you switch between prose and code artifacts within the same session. The built-in reflection agent automatically generates style rules and user insights from your chat history, storing them in a shared LangGraph memory store that persists across sessions for increasingly personalized assistance. Pre-built quick actions provide one-click access to common writing transformations including summarize, expand, simplify, and translate, while coding actions offer explain, refactor, add comments, and convert between languages. The monorepo architecture separates the Next.js 14 frontend from the LangGraph agent backend, connecting via HTTP and WebSocket protocols through the @langchain/langgraph-sdk client. Seven LLM providers are supported out of the box — OpenAI, Anthropic Claude, Google Gemini, Fireworks AI, Groq, Azure OpenAI, and local Ollama models — with Supabase handling authentication and data persistence. Deploy via Docker or build from source. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Backed by 9,000+ GitHub stars and developed by a Germany-based team with deep FIDO2 expertise, Hanko delivers the open-source authentication platform that replaces Auth0, Clerk, and Firebase Auth with a passkey-first architecture built on phishing-resistant WebAuthn credentials. The Go backend exposes both public and administrative HTTP APIs handling passkey registration and login, password authentication, email passcodes, TOTP-based MFA, security key verification, server-side sessions with remote revocation, and JWT issuing with configurable expiry and refresh policies. OAuth SSO connects Apple, Google, GitHub, Microsoft, and custom OIDC providers, while SAML Enterprise SSO integrates corporate identity providers for single sign-on across the organization. Hanko Elements provides framework-agnostic web components that embed complete onboarding, login, and user profile flows into any application with two lines of code, fully customizable via CSS variables and supporting i18n with custom translations. The JavaScript frontend SDK handles API communication, credential management, and session state for teams building custom authentication UIs without the pre-built components. Webhooks notify external services of authentication events including user creation, login, email verification, and password changes. Privacy-first design principles enforce data minimalism with user-deletable passwords and configurable identifier strategies supporting email-only, username-only, or combined approaches. Docker deployment starts the backend with PostgreSQL or MySQL, serving both APIs on configurable ports. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 (backend) / MIT (frontend) licensed.

Zero unifies Gmail, Outlook, and IMAP accounts into a single AI-enhanced inbox with keyboard-driven navigation that matches premium email clients in speed. Backed by 10,000+ stars and positioned as the alternative to Superhuman, it keeps your email data in your own PostgreSQL database while LLM agents handle categorization, priority sorting, draft composition, and natural language mailbox queries. You choose whether models run locally or through cloud providers you control. The Next.js and React interface delivers customizable keyboard shortcuts for every action: reading, archiving, labeling, composing. A WorkflowEngine defines automated multi-step rules including label application, bulk archiving, and conditional routing based on sender, subject, or content analysis. Built on Drizzle ORM with Better Auth handling Google OAuth, styled with TailwindCSS and Shadcn UI components, the interface is polished without being bloated. MCP integration exposes email management tools to external AI assistants for programmatic inbox control through standardized protocols. The Nizzy CLI handles environment configuration, database synchronization, and development server orchestration. Deploys via Docker Compose with a single database initialization command. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

The most comprehensive open-source control plane for Hermes Agent — a full workspace combining AI chat, visual workflows, multi-agent orchestration, coding agent management, and platform channel integration in one self-hosted dashboard. Real-time chat streaming over Socket.IO connects to any OpenAI-compatible backend including Ollama, OpenAI, Anthropic, and custom endpoints with multi-session management, tool call expansion, inline file previews for HTML, PDF, DOCX, images, and source code, plus profile-scoped uploads and workspace attachments. The visual workflow builder provides a Vue Flow canvas for constructing DAG-structured pipelines with directed edges, conditional routes, approval gates, loops, and live execution with per-node status updates. Platform channel integration configures Telegram, Discord, Slack, WhatsApp, Matrix, Feishu, DingTalk, QQBot, WeChat, and WeCom bots from one page with credential management and per-platform behavior settings. Multi-agent group chat rooms enable real-time messaging with @mention routing, automatic context compression, and SQLite message persistence. The coding agent panel installs, launches, and monitors Claude Code and Codex with built-in terminal, session history, and file diffs. Usage analytics track token consumption, estimated costs, cache hit rates, and 30-day daily trends with model distribution charts. Kanban boards plan and track agent work alongside cron job scheduling for recurring tasks. Deploy via Docker, npm CLI, or desktop installer for Windows, macOS, and Linux. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

"The easiest music streaming server available" is mStream's own billing, and the claim holds up: a lightweight Node.js app that turns a folder of audio files into a private streaming service in minutes, no external database required. Its filesystem-based design is the clever part - the API mirrors your folder structure, so you can browse and play music immediately, before any library scan finishes, and your organization on disk is your organization in the app. It streams flac, mp3, wav, ogg, opus, aac, and m4a, which matters to the audiophile crowd: FLAC plays uncompressed, bit-perfect, with gapless playback for live albums and continuous mixes. The web player runs anywhere a browser does and packs personality - a Milkdrop-style visualizer (Butterchurn), playlist sharing via links, and drag-and-drop uploads straight through the file explorer. Native iOS and Android apps add the feature streaming subscriptions can't match: sync your collection to your phone for true offline playback of music you own. Multi-user support assigns separate directories and permissions per account. Resource usage is famously light - mStream is tested on multi-terabyte libraries and runs happily on a Raspberry Pi, so a small RepoCloud instance serves a lifetime's collection. GPL-licensed, with zero listening-habit telemetry.

The integrations your SaaS product offers its own users - that is what Nango, an open-source product-integrations platform, exists to build. It solves the repetitive infrastructure work behind every third-party API connection: OAuth flows, API key handling, token refresh, encrypted credential storage, rate-limit backoff, retries, and multi-tenant connection management. It ships pre-built auth configurations for 800+ APIs. Your users connect their accounts through an embeddable, white-label Connect UI, and your backend then reads or writes data through Nango's proxy, SDKs, or REST API without ever touching raw credentials. Integration logic is written as TypeScript functions covering actions, scheduled data syncs, and webhook processing - all running on one runtime with retries, checkpointing, and per-connection logs built in. Syncs pull records incrementally on a schedule, one-way or two-way, which suits RAG pipelines, search indexing, and keeping local copies of external data current. Selected actions can also be exposed as tool schemas or through a built-in MCP server, so AI agents operate on user-connected accounts without ever handling provider credentials. Auth support spans OAuth 2.0, OAuth 1.0a, API keys, basic auth, and JWT, and observability - logs, metrics, failure detection, and a reconnect flow for expired credentials - is scoped per customer connection for easier support debugging. Works with any backend language. Self-hosting on RepoCloud keeps all customer credentials and synced data on infrastructure you control, which matters for data residency and compliance requirements.

What Jellyfin is for video, Komga is for comics, manga, BDs, magazines, and eBooks: point it at folders of CBZ, CBR, CBT, PDF, and EPUB files and it becomes a proper library with cover art, embedded metadata import, and per-user reading progress. The responsive web reader handles multiple reading modes - left-to-right for western comics, right-to-left for manga, webtoon scrolling - while collections and read lists organize crossovers and story arcs, with ComicRack .cbl read list import for existing curation. Its openness is the real differentiator: OPDS v1.2 and v2.0 feeds serve virtually every reader app (Panels, Moon+ Reader, Mihon/Tachiyomi, KyBook), with OpenSearch and page-streaming extensions so mobile apps fetch pages on demand instead of whole archives. E-ink support is built in, not bolted on - Kobo devices sync directly against Komga instead of Kobo's servers, with two-way read progress, on-the-fly KEPUB conversion via Kepubify, and optional proxying so official Kobo purchases still work; KOReader sync covers everything else. Multi-user management brings per-library access control, age restrictions, and label restrictions for family setups. Housekeeping tools detect duplicate files and duplicate pages, and a REST API feeds a healthy ecosystem of community scripts. Runs from a single Docker container with embedded SQLite.