Contracts signed on your own server: DocuSeal is the most feature-complete open-source, self-hosted alternative to DocuSign. A WYSIWYG builder turns any PDF into a fillable form with 14 field types: signature, initials, date, file upload, checkbox, dropdown, radio, stamp, and more. Documents route to multiple submitters in sequence or parallel, with automated SMTP email notifications, reminders, and a mobile-optimized signing experience that works on any device without an account. Every completed document carries an automatic PDF eSignature with verification and an audit trail. Templates are reusable and can also be generated programmatically - from HTML via API or from PDFs and DOCX files with embedded field tags - and the REST API plus webhooks drive full workflow automation, with embedded signing forms and form builders for React, Vue, Angular, and plain JavaScript. Files store on disk or in S3, Google Cloud Storage, or Azure. The UI ships in 7 languages with signing in 14. Runs on SQLite, PostgreSQL, or MySQL; AGPL-3.0 licensed with unlimited documents and no per-signature fees.

Applications publish an event once and stop caring who needs it next: Apache EventMesh receives CloudEvents over plain HTTP, stores them durably, and delivers each one to every subscription that matches. Producers call publish, consumers call subscribe or unsubscribe, and the runtime owns the registry, offsets, acknowledgements, and redelivery that messaging clients usually force you to build yourself. Subscribers choose load-balanced delivery for competing workers, broadcast delivery for every listener, or multicast for selected groups, and they receive events by HTTP long polling, Server-Sent Events, or WebSocket push. Filters drop irrelevant events before they leave the mesh, while transformers reshape payloads so a producer and consumer can disagree about format without either one changing code. Kafka and RocketMQ act as pluggable write-ahead storage, with an in-memory backend for development, and stateless runtime instances scale horizontally without consumer-group rebalancing. Twenty-three connectors move events into and out of RabbitMQ, Pulsar, MongoDB, MySQL change data capture, Redis, S3, Prometheus, Slack, DingTalk, Lark, WeChat, and AI services, each checkpointing offsets so failures replay instead of silently losing data. Agent-to-Agent protocol support and MCP connectors let AI agents exchange asynchronous events alongside synchronous tool calls, and event-triggered agents can publish decisions back into the mesh for downstream delivery. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

ProjectSend gives every client a private, signed-in page on your own server where only the files you assigned to them appear, so contracts, photo shoots, and quarterly reports skip the third-party file-sharing service. You upload once, then share a file or a whole folder with one client, a group, or anyone holding a public link, with an optional expiry date or download limit. Clients search, preview, and download files one by one or as a zip, whole folders included, comment on a document so questions stay beside it, and send files back within the quota you set. Uploads of up to 2 GB travel in resumable pieces, so a dropped connection pauses a transfer instead of ruining it. Folders, categories, custom client fields, and linked file versions keep a growing library tidy, while roles with granular permissions let staff work without becoming administrators. The activity log and download history record who received what and when, and the log exports to CSV. Sign-in works with email and password, LDAP, or Google and Microsoft accounts, with optional two-factor authentication. Your logo, watermark, themes, and editable email templates carry your brand, and the interface is translated into 16 languages. Optional virus scanning quarantines suspicious uploads, and a REST API with scoped tokens automates uploads, sharing, and account management. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-2.0-or-later licensed.

One statically-compiled Go binary over PostgreSQL, no ORM, no framework, static assets embedded in the executable: Miniflux is the minimalist, opinionated feed reader. The opinions are the feature: page layout, fonts, and colors are tuned for reading, and everything else is treated as noise. It consumes Atom, RSS, and JSON Feed formats with OPML import/export, organizes articles with categories and bookmarks, fetches original full-text content for summary-only feeds, and provides Postgres-powered full-text search. Privacy work happens automatically: pixel trackers are stripped, tracking parameters removed from URLs, a media proxy blocks third-party tracking, referrers are never forwarded, and there is zero telemetry. Navigation is keyboard-first - j/k through items, o to open, f to star - with touch gestures on mobile. Podcast, video, and music enclosures are supported, and YouTube videos play inline. Over 25 integrations save articles onward to Wallabag, Readwise Reader, Pinboard, Linkding, Instapaper, Notion, Telegram, Matrix, Ntfy, and more, plus webhooks and a REST API with Go and Python clients; the Google Reader API endpoint supports existing mobile reader apps. Authentication spans local passwords, passkeys (WebAuthn), Google OAuth2, OpenID Connect, and reverse-proxy headers. It is Apache 2.0 licensed, translated into 20 languages, and updates feeds on an internal scheduler.

One OpenAI-compatible endpoint, 1,600+ models behind it: Portkey Gateway sits between your app and every major LLM provider, deciding in real time where each request should go. When a provider times out or returns errors, automatic retries with exponential backoff kick in, and fallback rules quietly move traffic to your second-choice model before users notice anything. Load balancing spreads calls across multiple API keys and providers by weight, conditional routing sends each request down a different path based on its content or metadata, and per-request timeouts cut off providers that hang. Guardrails inspect inputs and outputs as traffic passes through: block banned words, screen for sensitive content, and enforce the checks your compliance team asked for, with dozens of pre-built rules ready to attach. Text is only the start: the same API shape reaches vision models, speech-to-text, text-to-speech, image generation, and realtime websocket APIs, so multimodal features stop multiplying your integration work. Routing policies live in JSON configs you attach per request or per client, which means experiments, cost controls, and provider migrations ship as configuration changes, not redeploys. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Governed by the non-profit Codeberg e.V. with over 150 contributors and quarterly major releases reaching v16.0 in July 2026, Forgejo delivers a complete code collaboration platform in a single Go binary that runs comfortably on 512 MB of RAM — providing full Git hosting with SSH and HTTPS, pull requests with inline code review, issue tracking with labels and milestones, kanban project boards, wikis, and an integrated package registry supporting Docker, npm, PyPI, Maven, NuGet, and Cargo. Forgejo Actions provides GitHub Actions-compatible CI/CD with reusable workflows, OpenID Connect for secure third-party access, ephemeral runners for autoscaling, and dynamic matrix support for complex build pipelines. The platform implements ActivityPub-based forge federation allowing issues, pull requests, and stars to work across independent instances — enabling a decentralized development ecosystem similar to how Mastodon federates social networks. Organizations and team permissions provide fine-grained access control, while LDAP, OAuth2, and OpenID authentication integrate with existing identity infrastructure. Code search indexes repositories for fast discovery, LFS handles large files efficiently, and mirror synchronization imports repositories from GitHub, GitLab, and other forges. Deploy via a single static binary, Docker container, or official Helm charts with SQLite for small instances or PostgreSQL and MySQL for production workloads. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPLv3+ licensed.

Full double-entry accounting on your own server: Manager.io Server Edition runs the same engine as the free desktop edition as a web server, so unlimited users work in unlimited businesses concurrently, with all books on infrastructure you control. The module coverage is genuinely comprehensive - general ledger with a customizable chart of accounts, sales and purchase invoices, quotes and orders, bank and cash account reconciliation, inventory with stock tracking, fixed assets with depreciation, payroll, multi-currency with exchange gains and losses, tax codes for VAT and GST regimes, and the complete reporting stack: balance sheet, profit and loss, trial balance, aged receivables and payables, and cash flow statements. The interface is translated into more than seventy languages, reflecting a genuinely global user base. The licensing model is the refreshing part: a server license is a one-time perpetual purchase, not a subscription - twelve months of updates included, optional renewals after, no per-user tiers, no data limits, and you can downgrade to the free desktop edition anytime, so your books are never hostage. Businesses wanting collaborative accounting behind their own firewall, with data sovereignty and no monthly fees, get exactly that.

Reaching 24,000 GitHub stars within two years of its first commit in July 2024, Beszel delivers Netdata-grade monitoring dashboards from a single Docker container with no Prometheus stack, no external database, and no complex configuration — just a one-binary hub on PocketBase (SQLite embedded) and a sub-15 MB agent per host that auto-discovers Docker and Podman containers on contact. The agent connects outbound via WebSocket or SSH tunnel, requiring zero open ports on monitored servers and zero manual network configuration. Per-host metrics cover CPU usage, memory with swap and ZFS ARC breakdown, disk I/O across multiple partitions, network throughput, load average, sensor temperatures, battery charge, and GPU utilization with power draw for Nvidia, AMD, and Intel cards — features that competitors lock behind paid tiers. S.M.A.R.T. disk health including eMMC wear indicators and Linux mdraid array status surface hardware degradation before failures occur. Container statistics track CPU, memory, and network history per container with automatic discovery as new containers start. Configurable threshold alerts notify via email, Discord, Telegram, ntfy, Pushover, Gotify, Matrix, Mattermost, Signal, Slack, Microsoft Teams, and Twilio when metrics exceed defined limits. Multi-user accounts with OAuth/OIDC authentication let teams share monitored systems with role-based access, while automatic backups persist data to disk or S3-compatible storage. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Stitching together separate SaaS subscriptions for applicant tracking, time-off requests, expense approvals, and monthly payroll creates fragmented employee records and costly per-seat bills; Frappe HR consolidates over 13 human resource modules into one self-hosted platform. People operations teams manage the complete employee lifecycle from job openings, interview assessments, and offer letters through structured onboarding, internal transfers, promotions, and exit interviews. Shift planners organize rotational rosters and capture geolocation-verified attendance check-ins, while employees request leave against regional holiday calendars and multi-tier policies. Finance and payroll managers build custom salary structures, configure regional income tax slabs, process regular or off-cycle payslips, and reconcile employee expense claims and cash advances directly with ERPNext accounting ledgers. Goal tracking and appraisal cycles align individual key result areas (KRAs) with self-evaluations and manager feedback scores. A progressive web app interface lets staff submit leave requests, log attendance, and file expense receipts from their phones. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Host your own email, files, calendars, and passwords on a single server with YunoHost, a server operating system that puts every app behind one web admin and one shared login. Browse a catalog of more than 500 apps, such as Nextcloud, WordPress, and Vaultwarden, filter by quality level, and install in a few clicks, or paste a Git URL for a custom app. Each person signs in once at a portal that shows a tile for every app they may open, and apps with single sign-on skip their own login screen. Groups and per-app permissions control access, including public access for visitors, and the Admins group adds web admin, SSH, and sudo. A full mail stack handles incoming and outgoing email per domain with DKIM signing, and Let's Encrypt certificates renew automatically. The domain screen suggests the DNS records you need and can push them to a supported registrar's API, while free .nohost.me, .noho.st, and .ynh.fr subdomains configure themselves. Backups bundle system settings, mail data, and chosen apps into downloadable archives that can be restored selectively from the admin or the command line. Twice a day a built-in diagnosis checks DNS records, mail setup, and system resources, then emails the admins if anything needs attention, with a firewall editor and fail2ban protection alongside. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

From a freelancer logging billable hours to companies with hundreds of users, Kimai scales professional-grade open-source time tracking - a Symfony/PHP application without the per-seat pricing of Harvest or Toggl. Tracking is flexible by design: run multiple concurrent timers, use punch-in/punch-out mode, or enter times manually, organized by customer, project, and activity with tags, and priced by user-, customer-, or project-specific rates. The billing pipeline is where Kimai earns "professional grade": generate invoices directly from timesheet data with configurable templates (DOCX, ODS, XLSX, PDF), entry grouping, and invoice-number generators, while an export flag locks billed records against editing and excludes them from future invoices - the audit-safety detail spreadsheet workflows never get right. E-invoicing supports EN 16931, XRechnung 3.0, and Zugferd/Factur-X. Enterprise controls come standard: SAML and LDAP login against Google Workspace, Azure AD, or Authentik, TOTP two-factor auth, customizable role permissions, and teams that scope customers and projects to departments. Money and time budgets alert before overruns, advanced reporting slices recorded time by any dimension, and an extensive JSON API plus a plugin marketplace (expenses, approvals, and more) integrate it with existing infrastructure. Over 30 translations, multi-timezone, AGPL-licensed.

What Gmail did for email, Octobox does for GitHub notifications: an ephemeral, unmanageable stream becomes an inbox you can actually triage. GitHub marks notifications read the moment you glance at them and lets old ones vanish days later; heavy maintainers end up building elaborate Gmail filter systems just to cope. Octobox - a Ruby on Rails app over PostgreSQL - syncs your notifications into a persistent inbox with an explicit archived state: mark a thread done, and if the issue or PR sees new activity, it pops back automatically, so nothing silently falls through. Triage is keyboard-driven with Gmail-style shortcuts (j/k to navigate, e to archive, m to mute, s to star), and multi-select clears noisy repositories in bulk. Filtering is where it earns its keep: slice by repository, organization, type, action, state, reason, CI status, labels, author, assignee, or bot origin, combine prefix search filters, and pin favorite searches to the sidebar. The optional GitHub App enriches entries with live PR/CI status and labels so you can decide without clicking through. Auto-archive rules clear merged PRs and closed issues; muting and snoozing silence the rest. A REST API supports integrations. Self-hosting keeps your notification metadata - a map of everything you work on - on your own server.

OpenList gathers every place your files live, local disks, S3 buckets, OneDrive, Google Drive, Dropbox, NAS shares, and forty-odd other services, into one browsable file list behind a single login. Mount each storage at its own path and the whole collection behaves like one tidy drive: documents open in the browser, whether PDF, Markdown, source code, or Office files, images get a gallery mode, and videos and audio play in place with subtitle and lyric support. Everyday file work happens in the same window: upload, delete, rename, move, and copy, including copying directly between two storages when you are migrating off a cloud plan. Offline download tasks let the server fetch links for you in the background, and multi-threaded acceleration squeezes speed out of sluggish single connections. Every folder can also be mounted as a real drive on your computer through the built-in WebDAV and FTP servers, with per-user permissions deciding who may read, upload, rename, or delete. Protected routes add passwords in front of sensitive shares, permalinks hand out direct download links, and granular user rules can hide files or open archive contents without extracting them. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

OpenMetadata builds a unified knowledge graph connecting schemas, tables, columns, dashboards, pipelines, ML models, and data products into one searchable catalog accessible at port 8585. The ingestion framework ships 130+ connectors covering Snowflake, BigQuery, Redshift, Databricks, PostgreSQL, MySQL, Kafka, Airflow, dbt, Tableau, Looker, Power BI, Metabase, and Superset, automatically extracting metadata on configurable schedules. Column-level lineage traces data flow across transformations, joins, and aggregations, while built-in data quality testing executes profiling and validation rules as data contracts with automated alerting on failures. Governance features include role-based access control, PII auto-detection, glossary term propagation, and domain-based ownership assignment. The native MCP server and AI SDK expose semantic search, lineage queries, and governance metadata as tools any LLM agent can call, enabling AI systems to discover and reason about enterprise data with full trust context. The architecture requires only PostgreSQL or MySQL plus Elasticsearch, no Kafka, no graph database, and deploys via a single Docker Compose file. Created by the founders of Apache Hadoop, Apache Atlas, and Uber's Databook, the platform has earned over 14,700 GitHub stars and adoption by 3,000+ organizations. Apache 2.0 licensed.

Backed by 8,700+ GitHub stars and designed as a modern alternative to Apache Airflow, Mage delivers the open-source data pipeline platform that combines the interactive flexibility of notebooks with production-grade orchestration in a single self-hosted environment accessible at port 6789. The modular block architecture lets data engineers compose pipelines from Python, SQL, and R code blocks with instant data previews, live execution logs, and visual debugging at each step. Over 100 prebuilt integrations connect sources and destinations including PostgreSQL, MySQL, Snowflake, BigQuery, Redshift, S3, Kafka, MongoDB, Amplitude, Salesforce, and Stripe with parallel stream synchronization for high-throughput data movement. Batch pipelines run on cron schedules or event triggers while streaming pipelines process real-time data from Kafka, Kinesis, and RabbitMQ with stream mode reducing memory usage by approximately 90 percent compared to batch processing. Native dbt integration builds, tests, and runs dbt models directly inside the pipeline editor alongside custom transformation blocks. Spark, Snowpark, and Databricks runtimes handle large-scale distributed processing. AI-assisted development generates code, fixes errors, and optimizes queries within the notebook interface. Monitoring dashboards track pipeline health with integrations to Datadog, Prometheus, New Relic, and OpenTelemetry. Terraform templates deploy production environments to AWS, GCP, or Azure with two commands, while Helm charts support Kubernetes clusters. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

AKHQ puts every Kafka cluster your team runs into one browser console, so topics, messages, consumer lag, schemas, and connectors stop being command-line archaeology. Browse live data inside any topic with search and Live Tail, inspect records by key or partition, and produce test messages without touching a console producer. Consumer group views show lag per partition, and offset resets take a couple of clicks instead of a maintenance window. Multiple clusters sit side by side in the same interface, each with its own Schema Registry, Kafka Connect, and ksqlDB connections attached. Schemas can be created, updated, and versioned from the UI, and Connect clusters report connector and task status you can pause, restart, or reconfigure. Administrators manage ACLs and cluster configuration from the same screens developers use to explore data. Access control goes deep: roles bundle resources and actions, groups scope them with topic patterns and cluster restrictions, and sign-in plugs into OIDC, LDAP, or basic authentication. Point it at your brokers with one configuration file, run it as a single container, and the whole platform team shares one safe window into production Kafka. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Webstudio delivers a professional-grade visual website builder that outputs semantic HTML and clean CSS without inline style pollution or JavaScript-heavy render paths. The live canvas editor provides direct manipulation of all CSS properties — flexbox, grid, spacing, typography, transforms, and filters — with real-time preview across responsive breakpoints. The component system supports reusable instances with variants and overrides, while design tokens maintain consistent colors, fonts, and spacing across the entire site. Data bindings connect to external content sources through native integrations with Strapi and Supabase, plus a generic CMS interface for any REST API backend. The Scroll Timeline API powers animations at 120 FPS off the main thread, with presets for rotate, scale, translate, opacity, color, and filter effects. Projects build as dynamic Remix applications with server-side rendering or export as static HTML, CSS, and JavaScript files. The Webstudio CLI generates Docker-ready builds that run a Node.js server on port 3000, with Nginx reverse proxy configuration for SSL termination via Let's Encrypt. The builder requires minimum 1 GB RAM and 1 CPU core for Docker builds. MCP integration enables AI agents to create and modify websites programmatically. On RepoCloud, deploy Webstudio projects on a dedicated VPS with root SSH access, persistent storage, and complete control over your hosting, custom domains, and deployment pipeline, all under the AGPL-3.0 license.

Design a website on a canvas, manage its content in spreadsheet-style tables, and publish plain HTML, all from one self-hosted Instatic server. Designers see several breakpoint frames side by side, or switch to live mode and edit one full-size page in place. A built-in design system expands one brand color into a full shade scale, generates fluid type and spacing scales, and writes the utility classes into a single small stylesheet. Reusable Visual Components take typed parameters and named slots, templates set site-wide or per-post-type layouts, and loops repeat a design over posts or media. Editors work in custom post types and data tables, and posts move through draft, scheduled, and published states. Forms on the site save their submissions to tables of your own. An AI agent can do the building, placing real, editable nodes on the canvas using Claude, OpenAI, OpenRouter, or Ollama with your own key, and an MCP connector lets Claude, ChatGPT, and other remote agents work on the site too. Super Import converts a whole static site into pages, styles, tokens, and media. Teams get roles built from 38 capabilities, TOTP two-factor sign-in, and an append-only audit log, plus site branches with private copies, shareable preview links, and merge review. Everything published is baked to plain HTML and CSS on disk. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.