NZBfast is a drop-in SABnzbd and NZBGet replacement that downloads from Usenet at line rate and hands you finished jobs verified and extracted. Point Sonarr, Radarr, LunaSea, or nzb360 at it and they keep working untouched, because the APIs they already speak are the ones it answers. The dashboard charts live throughput and resource use beside a drag-to-reorder queue with per-job detail, a provider leaderboard, and data-usage history. Fetching, PAR2 verification, and unpacking overlap in a single pass, so archives open in the stream and a job needs about its own size in free disk. RAR, 7z, and zip sets, encrypted archives, password chains, and nested archives all go through that pipeline, with automatic PAR2 repair when articles arrive damaged. The poster wall turns your newsgroups into a browsable media library with cover art and metadata, and videos preview with real seeking mid-download. Switch on the optional built-in indexer and it scans your groups into a local index behind a Newznab endpoint your other tools can query. Watchlists grab new postings and chase quality upgrades, while RSS automation, Smart Folders, and a weekly scheduler keep recurring downloads hands-off. Every setting is editable in the browser, the log streams into the UI, and a crash-safe journal resumes an interrupted job article by article. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

For video enthusiasts and media archivers who want complete ownership over their online video subscriptions, MyTube provides a self-hosted video downloader, library organizer, and streaming portal. Paste a single link or queue a batch of URLs from YouTube, Bilibili, Twitch, MissAV, and over one thousand yt-dlp compatible sites to archive videos directly to your disk. Subscribe to your favorite creators so new uploads download automatically in the background alongside their default language subtitles. Local video uploads automatically generate thumbnails and pull movie or television posters, cast details, release years, and ratings from TMDB. Curate custom collections, filter your catalog by tags or authors, and generate private RSS feed links for external podcast and feed readers. Built-in playback tools include keyboard shortcuts, cinema mode, Canvas-based in-car playback, and optional real-time audio translation with live subtitles via Google Gemini. You can sync finished recordings to Alist or OpenList cloud storage, trigger custom shell scripts on task completion, and receive instant Telegram bot alerts when downloads finish or fail. Share your library safely using read-only visitor accounts while protecting admin controls with WebAuthn passkeys or a 3x3 gesture lock. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Write the messages today that the people you love would need if you suddenly could not send them, and LastSignal holds them encrypted until silence says it is time. The system emails you a check-in on a schedule you set; answer it and nothing happens, which is exactly the point. Miss one and reminders follow at fixed intervals, and the final reminder can ping a trusted contact who is able to pause the countdown, buying time when a hospital stay or a lost phone is the real story. If nobody responds, your messages are delivered by email to each recipient, who decrypts them with their own passphrase; the server never holds plaintext, so even the person running it cannot read what you wrote. You can stagger access with a per-recipient delay, so one person reads their message the day it arrives while another waits the number of days you chose. Automations can report in through a keep-alive token endpoint instead of email, for machines that prove you are around by staying alive themselves. Timings for check-ins, reminders, and the trusted-contact pause are all configurable per account. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Insights LM gives you a NotebookLM-style research assistant that runs on your own infrastructure and answers strictly from the documents you feed it. Build a notebook for a project, drop in PDFs, pasted text, website links, and audio files, then ask questions in plain language and get answers grounded in those sources rather than the open internet. Every answer carries citations you can click to jump straight to the passage it came from, so verifying a claim takes seconds instead of a fresh search. Findings worth keeping become notes saved alongside the notebook, building a private knowledge base that grows with your research. When reading is too slow, generate an audio overview and listen to two hosts discuss your material like a podcast episode, perfect for absorbing a long report on a walk. Teams use it to interrogate internal documentation, onboard new hires against company knowledge, and brief themselves before meetings without uploading confidential files to a third-party service. Because the whole stack is yours, you choose which AI models do the reading, including local models for fully private work. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Production debugging slows to a crawl when logs, distributed traces, metrics, and session replays live in four disconnected dashboards, which is why Traceway consolidates every OpenTelemetry signal into a single self-hosted observability platform. Point any standard OTLP exporter directly at the ingestion endpoints without maintaining an intermediary collector or installing proprietary vendor SDKs. When an unhandled exception fires in production, automatic SHA-256 stack trace fingerprinting groups duplicates into prioritized issues complete with source-mapped frames and attached browser or Flutter session replays showing exact user clicks before the crash. Clicking any structured log entry jumps straight to its corresponding distributed span waterfall so engineers can trace slow database queries or failing downstream HTTP calls across microservices. Route performance bottlenecks surface immediately through per-endpoint P50, P95, and P99 latency percentiles ranked by Apdex and a five-factor impact score. Teams shipping AI features can also inspect LLM token consumption, model costs, tool calls, and multi-turn conversations grouped by customer identifier. Built-in on-call rotation schedules, escalation policies, and multi-channel alerts via Slack, Telegram, Pushover, email, and webhooks ensure incidents reach the right responder with one-click acknowledgment links. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Split Pro settles the question that ruins group dinners, who owes whom, with a private expense ledger that runs on your own server instead of an ad-supported app. Create a group for the apartment, the trip, or the team lunch rotation, then log each shared cost with its category, currency, date, and a photo of the receipt. Every expense splits your way: equally, by percentage, by shares, by exact amounts, or with manual adjustments when someone covered the tip. Rent, utilities, and subscriptions can repeat on a schedule so recurring bills enter the ledger on their own. The balances view shows exactly who is ahead and who owes, and debt simplification collapses a web of small obligations into the fewest possible payments. Negative expenses record refunds and corrections without breaking the math, and the activity feed keeps a visible history of every edit and deletion. Coming from Splitwise, you can import your friends and groups to pick up where you left off, and bank transactions from supported providers convert straight into expenses. On phones it installs as a progressive web app with push notifications whenever a new expense lands. Logins use email magic links, Google, or your own OIDC provider, and signups can be closed so the instance stays limited to your circle. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Every connection starts at the endpoint, never at the server, so Borg Backup Server can back up Linux, Mac, and Windows machines behind NAT and firewalls without opening a single inbound port. A lightweight agent on each machine polls for tasks over HTTPS, pushes deduplicated archives over SSH, and reports live progress. Append-only SSH access means an endpoint can add and restore archives but never prune or delete them. The dashboard shows backup charts, server stats, and active jobs at a glance. Plans run from hourly to monthly, several per client, built from reusable directory templates for common server roles, with per-plan retention from hourly to yearly. Lost a file? Browse the archive tree in your browser, tick what you need, and restore it to the client or download a .tar.gz. MySQL and PostgreSQL dumps run before each backup and restore as a copy or a replacement. Repositories can live on the server, on BorgBase, Hetzner, or rsync.net, and mirror to S3-compatible storage such as AWS, Wasabi, or Backblaze B2. Apprise alerts reach more than 100 services, and a nightly report lands in your inbox. Two-factor login and role-based access guard the console. Upgrades roll out to the server and every agent together, and the server backs itself up daily. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Fifty-plus image processing tools in a single Docker container, with no Redis, no Postgres, and no external dependencies: SnapOtter is a self-hosted image toolkit. The everyday operations are all here: resize, crop, compress, watermark, vectorize, meme generation, GIF creation, and format conversion spanning 55+ input formats (including 23 camera RAW formats) to 14 output formats. What sets it apart is the local AI layer: background removal, photo upscaling and restoration, object erasing, face blurring, OCR, and canvas expansion all run on locally hosted models, so no image ever leaves your server - a hard guarantee that cloud tools like remove.bg or Canva can't make. Optional NVIDIA GPU support accelerates those AI tasks substantially when hardware is available, but everything works on CPU. A built-in layer-based editor handles composition work directly in the browser, and screenshot beautification turns plain captures into polished visuals with backgrounds, shadows, and padding - useful for docs and marketing alike. Batch operations process unlimited images simultaneously, and the full REST API with OpenAPI documentation exposes every tool for pipelines and automations: thumbnail generation on upload, bulk RAW conversion, automated watermarking. For teams processing sensitive imagery or anyone tired of per-image SaaS pricing, SnapOtter replaces a stack of subscriptions with one private container.

QuickStack transforms your standalone Linux server or cluster into a self-hosted platform-as-a-service that automatically compiles, deploys, and monitors full-stack applications and relational databases without vendor lock-in. Developers can trigger instant deployments directly from public or private Git repositories, upload custom Dockerfiles, or pull container images straight from private registries with automated webhook synchronization. The built-in application catalog enables one-click provisioning of production databases including PostgreSQL, MySQL, MariaDB, MongoDB, and Redis with preconfigured internal network isolation. Administrators can route traffic across custom domains with automated Let's Encrypt SSL certificate issuance, inspect real-time CPU and memory telemetry, stream container runtime logs, and launch in-browser web terminals. Teams can configure granular role-based access controls with single sign-on authentication, establish zero-trust ingress and egress network security policies, and orchestrate automated volume snapshots directly to S3 object storage. When infrastructure requirements expand, operators can attach additional worker nodes using lightweight join tokens to distribute workloads seamlessly across high-availability compute pools. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GNU GPL v3.0 licensed.

QuickDrop functions as an ephemeral, self-hosted file distribution node and pastebin that eliminates account requirements for rapid data transfers. Users can drag individual files, paste plain text code snippets, or drop entire folder structures while preserving complete directory hierarchies through automated client manifests. Resumable chunked transfers split multi-gigabyte payloads into resilient blocks, ensuring dependable uploads over unstable network connections. Senders can protect sensitive documents with optional AES encryption at rest, individual passphrase requirements, and automatic metadata stripping that removes GPS coordinates and camera EXIF markers. Granular share token policies restrict access by enforce maximum download quotas, burn-after-reading limits, or strict calendar expiration timestamps. In-browser viewers generate instant previews for code syntax, Markdown documentation, PDF reports, audio tracks, and high-resolution images without downloading files locally. Built-in QR code generators allow mobile devices to retrieve shared payloads instantly across local wireless networks. System operators can govern storage lifecycles through an administrative control panel with configurable retention windows, automated background garbage collection, and custom storage caps. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Leave a fake door unlocked and see who walks through: Krawl is a self-hosted honeypot that poses as a sloppy web server and records everything scanners and scrapers try. Fake WordPress, phpMyAdmin, and admin logins. Every attempt logged, every credential captured. A .env file leaking fake database strings, AWS keys, and Stripe secrets. SQL injection, XSS, path traversal, XXE, and command injection traps that answer with believable fake output. SQLMap gets a different database error on every request. Malicious crawlers wander an endless maze of random links. An optional tarpit adds delay and word salad that cost scrapers time, storage, and tokens. Optional AI-generated pages write a plausible decoy for any path an attacker requests. A hidden dashboard shows an attacker map, top IPs, captured credentials, and per-IP forensics. TLSH fuzzy hashing groups webshell variants into campaigns. A behavior score labels each IP attacker, bad crawler, good crawler, or regular user. Export bans as raw lists, iptables, or nftables rules, with guides for Fail2Ban, OPNsense, and RouterOS. A canary-token link in decoy pages emails you the IP and user agent of anyone who follows it. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Your AI coding agent has your API keys in its environment and unrestricted network access, which means one prompt injection away from sending those secrets anywhere. Pipelock closes that gap by sitting as a proxy between your agents and every outbound connection, scanning the actual content of HTTP, WebSocket, MCP, and Agent-to-Agent traffic before it leaves your server. An 11-layer scanner pipeline checks every request against 62 credential patterns covering AWS, GCP, Azure, GitHub, OpenAI, Anthropic, SSH keys, and database URLs, then inspects every response for prompt injection using 29 detection patterns with six-pass normalization that catches base64-encoded, leetspeak, and whitespace-obfuscated payloads. The MCP proxy wraps any Model Context Protocol server (stdio, HTTP, or WebSocket) with bidirectional scanning that detects tool description poisoning and mid-session rug-pull changes via SHA-256 fingerprinting. Every scanning decision produces a cryptographically signed action receipt that third parties can verify offline without trusting the agent or the vendor. The Operator Console provides a web dashboard for reviewing evidence scorecards, receipt timelines, agent sessions, enforcement decisions, and fleet posture at a glance. Cross-request taint tracking catches slow-drip exfiltration attempts that spread a secret across multiple calls. Canary tokens plant synthetic secrets that trip alerts the moment an agent tries to exfiltrate them. Pre-built Prometheus metrics and a Grafana dashboard provide real-time visibility into traffic volumes and block rates. Deploy on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Tiledesk lets you build AI-powered conversational agents with a visual drag-and-drop designer, then deploy them simultaneously across web chat, WhatsApp, Telegram, Facebook Messenger, Instagram, email, and Slack without rebuilding per channel. The no-code Design Studio combines LLM-powered conversations with conditional logic, external API calls, and branching dialogue trees that work identically everywhere. Multi-RAG knowledge management separates content into isolated repositories with hybrid search combining traditional full-text retrieval and semantic understanding via Qdrant vector embeddings, enabling accurate answers even when users phrase queries in unexpected ways. LLM integration supports GPT-4, GPT-4o, Anthropic Claude, and any model exposing an OpenAI-compatible API including locally hosted models via Ollama for complete data sovereignty. The human-in-the-loop system provides seamless escalation from AI agents to live support staff with full conversation context preserved, while multi-agent workflows enable complex orchestration where specialized bots collaborate on different aspects of a customer interaction. REST and MQTT APIs power integration with external systems and webhook-triggered automations, and pre-designed templates accelerate common scenarios. Docker Compose deployment starts the full stack including server, dashboard, messaging engine, and widget. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

One endpoint, every model you run, and a government-grade paper trail for each request. OpenGateLLM sits in front of your AI infrastructure as the single door: applications call one OpenAI-compatible API, and the gateway decides which backend answers, a self-hosted vLLM cluster, an Ollama box in the corner, a Hugging Face TEI embeddings service, or a hosted provider when you allow one. You publish friendly model names as routers and attach real provider APIs behind them, then load-balance across those backends by shuffle or least-busy so a second GPU node starts earning its keep the moment you register it. Chat completions, embeddings, reranking, OCR, and audio transcription each get their standard endpoint, so existing OpenAI SDK code, LangChain, and LlamaIndex projects point at a new base URL and keep working. Governance is built in rather than bolted on: organizations, users, and roles control who may call which model, API keys authenticate every request, and rate limiting keeps one enthusiastic team from eating the whole cluster. Usage monitoring follows every inference, and carbon footprint estimates attach to models through their hosting zone and parameter counts. Retrieval-augmented generation against Elasticsearch or Qdrant plugs into the same surface. No chat history is stored, which is rather the point when the data is yours. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

A personal flight logbook you host yourself, Jetlog draws every route you have flown on a pannable world map and turns the totals into charts. The home page opens with counts of flights, airports, hours, distance, and countries above that map, where dots mark visited airports and lines trace each trajectory. Settings let markers and lines grow with visit frequency and shade the countries where you have landed. Logging a flight takes only two airports and a date. Type a flight number and press Fetch to pre-fill the origin, destination, and airline, and a utility links connection flights automatically. Duration and distance are calculated for you and stay editable, with an option to use airport time zones. The All Flights table lists route, times, duration, distance, seat, class, and airline with filters and configurable columns, and each flight opens a detail page with airport data, a route map, tail number, and aircraft. A Statistics page charts flights per month, cumulative distance, most visited airports, most common airlines, ticket class, and seat for any time frame. History arrives through MyFlightRadar24 or custom CSV imports and leaves as CSV or iCal. Family members can share one install with separate logbooks, an admin manages the accounts, and the responsive layout works on a phone at the gate. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-2.0 licensed.

A trading journal you host yourself, Trade Journal rebuilds broker fills and statement exports into round-trip trades, a profit and loss calendar, and daily notes that show what actually works. Read-only sync covers more than twenty brokers and exchanges, including Alpaca, Binance, Coinbase, Kraken, and IBKR Flex. Statement import auto-detects TradingView, MetaTrader, NinjaTrader, Tradovate, and thinkorswim files, handles TradeZella and Tradervue CSV migrations, and maps columns for anything else. Trades can be matched first-in-first-out, last-in-first-out, or by weighted average, with partial fills, scale-ins, and futures multipliers handled. The dashboard offers gauges, cumulative and daily P&L, an Edge Score radar, and cards you can rearrange into named layouts, while Reports break results down by symbol, tag, mistake, playbook, weekday, and time of day. Each trade page charts entries and exits and can replay candles you load, with estimated MAE and MFE. Daily journal pages hold Markdown notes, templates, attachments, and voice dictation, and optional AI recaps use your own Anthropic or OpenAI key or a local Ollama model. Playbook checklists score rule adherence, a prop firm ledger tracks costs and payouts, and privacy mode masks every amount. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Omnom saves the pages you bookmark as full rendered snapshots, so the article, thread, or documentation page you kept is readable years later even if the original site changes or disappears. Bookmarks accumulate multiple snapshots over time, and the compare view shows two side by side or as a unified diff, revealing what an edited page used to say. Images and other media are downloaded and stored alongside each snapshot, keeping saved pages complete offline. The Firefox and Chromium extensions send pages exactly as your browser rendered them, capturing dynamic content a simple link saver would lose. A built-in reader aggregates your RSS and Atom subscriptions into one stream, where you can archive items individually or page by page and search feeds and bookmarks together. Through ActivityPub, other people can follow your public bookmarks from Mastodon or Pleroma, and you can follow Fediverse accounts in the same stream. Bookmarks can stay private or be shared publicly, organized with tags and nested collections, and filtered by date, domain, owner, or free text across saved content. Your dashboard tracks weekly, monthly, and yearly bookmark counts beside your most used tags, while a documented API and command line tools handle imports, tokens, and feed updates. Sign-in relies on one-time email tokens, OAuth, or a trusted Remote-User header from your reverse proxy, so no password is ever stored. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

PinePods delivers a centralized, self-hosted podcast ecosystem that liberates personal listening histories, audio files, and show subscriptions from commercial streaming walled gardens. Users can discover new shows through built-in search connectors across Podcast Index, iTunes, and YouTube, streaming audio and video episodes with variable playback speed, chapter markers, and synchronized transcripts. A persistent queue and custom playlist builder keep media sequences orderly across web browsers, desktop installations, and mobile clients with native CarPlay and Android Auto support. Built-in gPodder server synchronization enables seamless cross-device progress tracking with third-party podcast apps like AntennaPod. Automatic episode downloader engines monitor subscribed feeds, archiving new releases to local server storage according to customizable retention rules and storage quotas. Multi-user authentication secures household access through OIDC single sign-on and two-factor TOTP verification, while an integrated terminal client lets command-line enthusiasts manage queues directly over SSH. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.