ThoughtDAG turns a long AI conversation from a scroll you cannot rearrange into a map you can edit, branch, and reconnect. Every question and answer becomes a node on an infinite canvas, and the wires between nodes are not decoration: they decide exactly what context the model sees next. Follow a promising thread, park a side question on its own branch, or cut a wire when an early assumption starts poisoning later answers, all without deleting the work that led there. Zoom out to read the shape of an investigation, then zoom back in to full answers, attachments, and highlighted passages. Drop in documents and files as material nodes, ask questions from them, and preview precisely what will be sent before a model runs. Past coding agent sessions can be opened as read-only graph mirrors, so a discussion that started in a terminal can be inspected, cited, and continued on the canvas. Memory lives in readable dossiers that collect decisions and open questions per topic, with sources attached, and relevant dossiers join new questions when you ask. Export a backup, a Markdown context chain, or a thought map that shares the structure of your thinking without dumping the whole transcript. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

With nearly 600 GitHub stars and a feature set that rivals commercial note apps, Glass Keep is the self-hosted Google Keep alternative that wraps a full-featured notes system in a glassmorphism UI with blurred backdrops, translucent modals, and smooth transitions. The React and Vite frontend renders notes in a masonry card grid with pinning, color themes, tag chips, and drag-and-drop reordering. Text notes support Markdown with headings, bold, italic, strikethrough, blockquotes, and fenced code blocks, while checklists offer inline editing, drag-to-reorder items, and direct toggle from the grid without opening the note. A freehand drawing mode provides customizable brush sizes and colors for handwritten notes. The private AI assistant runs an optimized Llama 3.2 (1B) model entirely inside the Docker container using RAG over your own notes, answering queries like "what are my AWS commands?" without any data leaving your server. Deep search spans titles, Markdown text, tags, checklist items, and image names. Import notes from Google Keep via Takeout JSON files or export your entire vault as JSON with per-note Markdown downloads. The Express backend with better-sqlite3 requires no external database. Real-time collaboration enables shared checklists with live item toggling. Dark and light themes persist across sessions, and the PWA manifest supports installation on any device. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

When international movies and series arrive in a Radarr or Sonarr library without native-language captions, Lingarr automatically translates subtitle files across dozens of languages using local AI models or cloud translation engines. Connect your existing movie and television directories to scan media folders, identify missing target-language subtitles, and generate translated caption files alongside the original video streams. Administrators can configure an ordered chain of 13 translation backends, pairing a primary engine such as OpenAI, Anthropic, Gemini, DeepSeek, Mistral, xAI, or DeepL with automatic fallback to self-hosted LibreTranslate or local Ollama models whenever rate limits occur. Context-aware prompt templates inject preceding and following dialogue lines into each AI request so idioms, speaker tone, and timing remain natural across scene transitions, while batch translation mode processes multi-line blocks in a single call. From the web dashboard, users can browse indexed movies and episodes, trigger manual single-file or library-wide translations, and monitor active queues, progress percentages, and historical logs in real time. Scheduled background tasks and a documented REST API allow media servers to automate caption generation completely hands-free as new releases finish downloading. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

FireShare turns a folder of game captures on your server into a browsable library where every clip gets its own permanent link, ready to paste into Discord the moment something worth bragging about happens. Point it at the directories you already record to and it scans what is there: the file people watch is always your untouched original, in MP4, WebM, or MOV, never a recompressed stand-in. Privacy is set per file, public for the feed, link-only for friends, or behind a password, and whole folders can be shared as a single link. It also sorts the chaos for you, detecting the game in each capture and shelving hundreds of timestamped filenames under proper cover art you can search and browse. Trim the dead air off a clip before posting it, add a title, description, tags, and a custom thumbnail, and watch the view count climb. For screens that struggle with huge originals, optional transcoding adds adaptive lower qualities on CPU or an NVIDIA GPU, and HDR captures get tone-mapped to SDR instead of looking washed out. Friends can upload through the browser or by token from scripts, new public clips can announce themselves to Discord or an RSS reader, and accounts come with permissions, profiles, and two-factor sign-in. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

For teams that need ISO 27001, NIS2, and GDPR evidence without handing compliance data to a SaaS vendor, ISMS Builder is a self-hosted information security management system for policies, risks, assets, audits, and incidents. Compliance managers move policies from draft through review to approved and archived, and recipients confirm each one through a token link that needs no login. Security officers close gaps in a Statement of Applicability that cross-maps BSI IT-Grundschutz, NIS2, EUCS, the EU AI Act, and the Cyber Resilience Act, with ISO 27001 controls imported from their own licensed copy. Risk owners keep treatment plans, turn Greenbone and OpenVAS reports into risk drafts, and score assets for confidentiality, integrity, availability, and authenticity. Data protection officers run records of processing, processor agreements, impact assessments, data subject requests, a 72-hour timer, and a deletion log with email alerts. The CISO inbox collects incidents, including reports from a public form that needs no login, beside a 30-item NIS2 Article 21 checklist and Article 23 deadline alerts. Auditors work from a findings register, a compliance matrix, and an exportable audit log of every create, update, delete, and login. Administrators enforce TOTP two-factor sign-in, choose among German, English, French, and Dutch, run semantic search locally through Ollama, and publish approved policies to Nextcloud or ownCloud as PDFs. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

A fast, read-only radar for outdated Docker images. Cup reads the images behind your running Docker or Podman containers, asks each registry whether a newer digest or tag exists, and flags every result as a major, minor, or patch bump, a plain digest change, or up to date. Docker Hub, ghcr.io, Quay, lscr.io, and Gitea-style registries are supported, private ones through token authentication, and checks are designed not to exhaust registry rate limits. The browser dashboard on port 8000 counts monitored, outdated, up-to-date, and unknown images, adds search and filters, and opens any image to show its update type, check time, and a copyable pull command. Prefer automation? Schedule refreshes with a cron expression, trigger one through the API, or run the cup check command from a cronjob for table or JSON output. Rules in cup.json exclude images, ignore registries, and skip chosen update types, even per image. The JSON API feeds Homepage widgets, Home Assistant, and custom dashboards, one dashboard can aggregate several Cup servers, and agent mode serves the API without the interface. Cup only reports, so deciding when to update stays with you. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Organizations deploying multiple large language models across departments use DEEIX Chat as their centralized AI workspace for model routing, multimodal conversations, document retrieval, MCP tool execution, and usage governance. Administrators connect upstream channels across OpenAI, Anthropic, Google Gemini, xAI, and OpenRouter protocols while configuring route priorities, traffic weights, and automatic circuit breaking from a unified control plane. Team members switch models mid-conversation, branch message threads, adjust reasoning effort, and generate images or video without managing individual API keys, or optionally bring their own provider keys under admin policy rules. Uploaded PDFs, spreadsheets, and images undergo OCR and semantic chunking so users can attach personal or shared knowledge bases directly to chat sessions with traceable retrieval evidence. Interactive responses render live HTML, SVG, Mermaid diagrams, KaTeX math, and stateful parameter sliders inside a sandboxed preview pane alongside the conversation. Built-in support for Streamable HTTP Model Context Protocol servers lets users discover and invoke external tools with per-message execution limits and full call inspection. Integrated permission groups, OIDC single sign-on, TOTP two-factor authentication, token and per-call billing ledgers, and audit logs give operators complete visibility over usage and spend. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Connecting autonomous AI assistants to internal enterprise databases and legacy systems is streamlined by AnythingMCP, a visual Model Context Protocol gateway with automated knowledge graph generation and granular access controls. Engineers can import OpenAPI specifications, Postman collections, SOAP WSDL files, or raw database credentials to generate standardized Model Context Protocol tools in minutes without writing custom code. The built-in knowledge graph automatically maps entity relationships across disparate databases and software platforms, teaching agents how to correlate customer records in CRM tools with live order histories in enterprise resource planning software. System administrators can enforce fine-grained access policies by restricting tool execution permissions to specific roles and scoping database operations to read-only queries with strict row limits. An interactive web console provides real-time tool inspection, payload testing, request tracing, and comprehensive audit logs that capture every upstream invocation with full parameter visibility. Enterprise teams can integrate identity providers through OAuth2, SAML single sign-on, and SCIM automated user provisioning while protecting sensitive credentials using AES-256-GCM encryption at rest. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GNU AGPLv3 licensed.

Metadata Remote is a browser-based audio tag editor designed specifically for headless music servers, enabling collectors to fix ID3 tags, embed high-resolution cover art, and match releases against MusicBrainz without moving files off their NAS. Navidrome, Jellyfin, and Plex administrators can browse mounted directories directly from any browser, inspect standard and extended metadata fields, and apply single-file or bulk folder-wide updates in one click. Clicking an empty or incomplete field activates the smart inference engine, which analyzes filenames, directory hierarchy, and sibling tracks alongside live MusicBrainz queries to present candidate values ranked by confidence percentage, including specialized matching rules for classical works, multi-artist compilations, and live bootlegs. Built-in audio streaming lets you audition MP3, FLAC, OGG, OPUS, M4A, M4B, WMA, WAV, and WavPack files inside the interface to verify mysterious tracks before renaming files or folders inline. A dedicated long-form text editor automatically opens for lyrics and liner notes exceeding 100 characters, while the album art manager previews image dimensions, bulk-embeds covers across entire albums, and repairs corrupted artwork headers automatically. Every single-track edit, custom field creation, and batch folder operation is tracked in a 1,000-step undo and redo history with full keyboard-only navigation. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Silent background task failures and scattered crontab files across Linux hosts make routine maintenance risky, which Cronmaster solves with a visual scheduling dashboard and live execution log viewer. Five-field cron expressions translate automatically into plain English alongside one-click schedule presets. Operators can create, comment, clone, pause, or delete scheduled jobs across single or multiple Linux users in seconds. A built-in script manager lets you write, duplicate, and organize reusable Bash scripts from starter templates right inside the browser. Turning on per-job execution logging wraps commands automatically to record standard output, standard error, start and finish timestamps, duration, and exit codes. Log retention policies keep disk usage bounded automatically. Long-running tasks stream their console output live over Server-Sent Events, and any job can be triggered on demand with a single click. Across the top of the workspace, real-time hardware telemetry cards report system uptime, CPU load, memory consumption, network throughput, and GPU utilization. Administrators can protect the interface with local password authentication, OpenID Connect single sign-on with group and role rules, or Bearer API keys for the full REST API. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Bugsink has earned over 1,800 GitHub stars as the lightweight self-hosted error tracking platform that replaces Sentry without per-event billing by accepting error reports from any Sentry-compatible SDK across Python, JavaScript, Node.js, Ruby, Java, PHP, Go, and every other language Sentry supports. Simply update the DSN in your existing Sentry configuration and Bugsink captures the same stack traces, local variables, request context, and breadcrumbs that Sentry processes, displayed through a focused interface designed for debugging rather than dashboarding. Automatic issue grouping collapses duplicate error events into single actionable issues based on exception type, message, and stack frame context, turning thousands of raw events into a manageable list. Issue status tracking supports resolved, resolved-in-next-release, and muted states with automatic regression detection when resolved issues recur. Release tracking associates events with deploy versions to correlate error spikes with specific rollouts. Tag-based search filters issues by environment, release, user, browser, operating system, or any custom key-value pair sent by the SDK. Alerting notifies your team through Slack, Discord, Mattermost, and email when new issues appear or resolved issues regress, with per-project webhook configuration and user-level notification preferences. Per-project retention policies with automatic event eviction manage storage growth. A REST API with OpenAPI documentation enables custom integrations and dashboards. Source map support links minified JavaScript to original source. Deploy via Docker with the bugsink/bugsink image. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. PolyForm Shield licensed.

Rustunnel turns a service running on your laptop or private network into a public HTTPS, TCP, or UDP endpoint without opening inbound ports on the machine where it lives. Point the client at a local port and share the public address for webhook testing, a quick demo, an AI agent tool, SSH access, a game server, or an IoT device that cannot accept inbound connections. Give tunnels custom subdomains on your own wildcard domain, terminate HTTPS with automatic Let's Encrypt certificates, and keep client traffic encrypted from edge to local service. Put several backends behind one subdomain or TCP port and let TCP or HTTP health probes remove sick members before visitors hit them. When two peers can reach each other directly, start a P2P tunnel with NAT hole punching and QUIC, with relay fallback when the direct path fails. Watch sessions, tunnel health, traffic, and request logs from the live dashboard, inspect headers and bodies in the local request inspector, and replay a captured call while debugging a webhook. Manage tunnels, tokens, groups, captured requests, and history through the REST API, scrape Prometheus metrics, review audit logs, or let an MCP-compatible coding assistant create and close tunnels in plain language. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Build your own image and video sharing site, with public galleries, private albums, and embeddable links, on a server you control. Uploads arrive by drag and drop, clipboard paste, image URL, camera, ShareX, or API, in AVIF, JPEG, PNG, GIF, WebP, BMP, MOV, MP4, and WebM, and chunked transfers handle large files. Lossless JPEG handling fixes orientation and can strip EXIF data. Duplicate detection catches repeat uploads. Tags are created on the fly with autocomplete, camera models become tags automatically, and albums nest into sub-albums with covers, privacy levels, and passwords. Categories, search, and explore views help visitors find things; a bulk importer brings in folders of existing media. Each file gets viewer, direct, thumbnail, and medium links plus HTML, Markdown, and BBCode snippets with one-click copy, and oEmbed lets other sites preview a link. Roles split admin, manager, and user duties, profiles can be private, and two-factor authentication protects accounts. Files sit on local disk or S3-compatible storage, optionally served through a CDN URL. A dashboard tracks usage, color palettes and custom CSS and JavaScript restyle the site, and a single-profile mode suits a personal portfolio. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Browser tests, load tests, uptime checks, public status pages, and an AI incident investigator all live in one self-hosted dashboard called Supercheck. Write browser, API, database, custom, and k6 performance tests in a built-in code editor, or record a flow with the Chrome and Edge Recorder extension and save it as a Playwright script. Group tests into scheduled jobs, trigger them from CI with trigger keys, and review run logs, screenshots, traces, and reports. Five monitor types cover HTTP endpoints, website SSL expiry, ping, TCP and UDP ports, and scheduled synthetic browser journeys, with administrator-defined check locations and alerts to email, Slack, Discord, Telegram, Microsoft Teams, or webhooks. Status pages publish component health with 90-day uptime, incidents, scheduled maintenance, badges, and subscriber notifications under a subdomain or custom domain. When something breaks, the incident workspace collects evidence, drafts an evidence brief, and runs a read-only AI investigation across connectors such as GitHub, Prometheus, Grafana, and Kubernetes, while Copilot answers questions about that evidence. Requirements link expectations to tests and show coverage, and AI can extract them from a PRD. Organizations, projects, six roles, API keys, and audit trails keep teams in their lanes, and the CLI pulls, diffs, and deploys resources as code. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Large link collections stay fast and organized in Faved, a private, self-hosted bookmark manager built for exactly that job. Its core is a nested tagging system that outgrows flat folders: place Go and Python under Programming Languages, color-code tags, add descriptions, pin frequent ones to the top of the sidebar, and optionally roll up child-tag items into parent views. Saving is frictionless - a lightweight bookmarklet works in any desktop or mobile browser without extensions, and Apple devices can send links through the native Share menu. Faved fetches titles, descriptions, and preview images automatically, keeps that metadata fresh over time, and flags duplicates as you save. Instant as-you-type search, flexible sorting, and bulk actions (retag, delete, refetch) keep collections of any size manageable, while customizable layouts - card, list, or table - plus a system-synced dark mode adapt the interface to your workflow. Migration is first-class: import from Chrome, Safari, Firefox, or Edge with folder structure preserved, or move from Pocket and Raindrop.io keeping tags and collections. The stack is deliberately light - PHP 8 with SQLite behind a React/Tailwind frontend - deploying via Docker with no external dependencies. All data stays local: no ads, no tracking, and no risk of your library vanishing with a discontinued service.

Track income, recurring expenses, and multi-currency assets with WYGIWYH, a self-hosted personal finance platform built on a strict cash-flow principle that preserves monthly savings while exposing spending patterns. Users can aggregate holdings across checking accounts, physical cash reserves, crypto wallets, and custom asset models with automatic foreign exchange rate calculations. The transaction engine executes automated adjustment rules to normalize merchant names, apply category tags, and calculate split costs on every purchase. Investors can schedule dollar-cost averaging portfolios to monitor accumulation performance and price averages over extended investment horizons. Interactive dashboards provide monthly breakdown grids, calendar views of pending recurring bills, and multi-year net worth trajectories. Financial analysts can export transaction journals to CSV, automate data synchronization through REST webhooks, or query accounts with AI agents via the Model Context Protocol. Customizable notification triggers alert account owners to payment due dates and anomalous spending spikes across monitored accounts. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GNU AGPL v3.0 licensed.

NetMap answers the four questions every homelab owner asks in four different tools: what is on my network, what address did it get, is it still up, and why is the firewall shouting about it. Devices you add appear automatically on a visual canvas where you can drag them into place, draw the links between them, and group them into VLANs or separate sites, and the layout is still there when you come back. Behind the map, every device is watched continuously: ping times graphed over history, service checks on the ports you care about, a heartbeat strip that betrays intermittent dropouts, and an uptime percentage that settles arguments. Address management stops being a spreadsheet: define subnets, import the leases your router already handed out, see used and free addresses as a grid, and get warned before a duplicate assignment causes a mysterious outage. Firewall logs stream in live and each entry links to the device it concerns, ready to search by address, port, or protocol. When something new appears, a network scan discovers hosts with their names, hardware addresses, and open ports for review before they join the inventory. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Flight Finder is a self-hosted tracker that watches flight, hotel, and car rental prices for you and alerts you when a fare you care about drops. Search in plain language, such as NYC to Tokyo next month under a set budget, and the app turns that request into tracked routes with flexible date ranges. Price evolution charts show how fares move over days and weeks, so you can see whether a price is genuinely cheap or just pretending. Click any point on a chart to jump straight to the airline booking page, or share the chart through a public link that needs no login. Compare carriers side by side to spot which airlines are softening prices and which are climbing. Test whether browsing from another country changes the quote with the optional VPN comparison. Track hotels by dates, rooms, and guests, follow a specific room rate or the cheapest qualifying offer, and set a target price that triggers a notification. Do the same for car rentals, comparing verified totals before you commit. Alerts arrive through Telegram, email, ntfy, webhooks, Pushover, or WhatsApp, with rules for target prices and percentage drops. Households can share one instance while each person keeps separate trackers and administrators manage assignments. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.