Eliminate scattered configuration files and leaked credentials across development teams with Shelve, an open-source secrets management platform that secures environment variables across development, staging, and production tiers. Engineering teams can organize sensitive database passwords and third-party API credentials within a centralized vault protected by AES-256 encryption and SHA-256 integrity verification. The platform synchronizes configurations directly to GitHub Actions and repository secret stores through an official GitHub App integration. Developers can inject encrypted variables directly into local processes using the dedicated CLI without saving plain-text secrets to disk. The built-in sharing vault creates self-destructing, password-protected links to exchange sensitive credentials securely with external contractors. Administrators can define custom workspace teams with granular role-based access controls, track change audit logs across configuration histories, and navigate management views using a keyboard-driven command palette. Automated schema validation engines detect missing parameters and enforce uniform uppercase naming standards across application tiers. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

A drag-and-drop task board that works fine on its own and can also hand cards to AI coding agents, Veritas Kanban shows what each agent is doing, what it changed, and what is waiting for your approval. Start with no agents at all. Cards move through To Do, In Progress, Blocked, and Done, and each one carries subtasks, dependencies, time tracking, comments, and an activity log. When you are ready, connect Codex, Claude Code, Copilot CLI, Hermes, or OpenClaw, give every agent an Intern, Specialist, or Lead permission level, and follow each agent's status and model on a live dashboard. Let a task run in its own Git worktree, read the diff, leave inline comments, approve or request changes, and open a GitHub pull request from the task panel. Squad Chat gives agents one shared channel that posts spawned, completed, and failed events. Workflows chain steps with parallel branches, loops, and human approval gates. Policy rules allow, deny, or hold agent actions for review. Assistants reach the board through an MCP server, a command-line client, or a REST API. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Picture a small staff of AI agents clocking in on your own server, each with a name, a specialty, its own model, and a private Linux desktop it can click around in. Every agent works inside a disposable Docker workstation with a shell, persistent files, and a Chromium browser, so it can research the web, write and run code, and finish multi-step tasks without touching your own files. You watch an agent click and type in real time, and when a login, payment, or one-time code needs a human, you take over the desktop, then hand it back with a note and let it continue. Pair a Telegram bot by scanning a QR code and you can assign work, answer questions, and receive results from your phone, with no public URL or port forwarding. Routines turn recurring requests into schedules, so a morning briefing, a price watch, or a weekly report runs by itself and reports back when it is done. Each agent can use a different model, from OpenAI, Anthropic, Google, xAI, Groq, Mistral, or DeepSeek to a local Ollama endpoint, and every reply shows its cost while a monthly budget pauses paid models automatically. Agents remember what matters about you across every thread, and logins or cards you save sit in an encrypted vault the agents themselves never see. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Self-hosted music requests, no Lidarr install needed: DroppedNeedle searches MusicBrainz, drives your own slskd or Usenet setup, and files only verified, tagged tracks in your library. Request a whole album or a single track, then retry or cancel from a dedicated requests page. The engine queries slskd, or SABnzbd with Newznab indexers or Prowlarr, and scores every candidate before anything downloads. Files must pass checks for readable tags, a sane duration, and an optional AcoustID fingerprint match. Close calls park for admin review. Failed requests are searched again until a verified copy arrives. Quality floors per format and storage caps keep the library tidy, and better copies replace old ones. The built-in player queues Jellyfin, Navidrome, Plex, local files, and YouTube previews with shuffle, a 10-band equalizer, and embedded lyrics. Prefer your own app? Symfonium, Finamp, Feishin, and other Subsonic or Jellyfin clients connect with revocable app passwords. Discovery rows draw on ListenBrainz and Last.fm history and global charts, and a weekly mix can queue up to five missing albums. Follow artists for new-release alerts, or add Ticketmaster or Skiddle keys for gig listings in cities you choose. Import Spotify playlists, or drag in a zip of music you bought. Admin, Trusted, and User roles decide whether a request starts at once or waits for approval. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

PicPeak is a self-hosted gallery platform where photographers deliver event photos to clients through private, branded links that expire on their own schedule. Every gallery gets a share link, an optional password, and a QR code that exports as PNG, SVG, an A6 table card, or an A4 poster, so a reception can put the gallery on every table. Guests browse in one of seven layouts, from grid and masonry to carousel and timeline, and react with likes, favorites, star ratings, comments, emoji reactions, or color labels. For a party, open the gallery to guest uploads, hold the finished edit back with Reveal Mode until a scheduled moment, and put the optional Live Slideshow link on a projector so new photos appear as they arrive. Theme presets, custom colors, logos, fonts, CSS, and CMS pages keep the studio's brand in front, while bulk ZIP downloads, capped download sizes, watermarking, and right-click blocking control what guests take home. An analytics dashboard tracks views, unique visitors, and downloads. Beta modules add face grouping that runs in a separate container on your own server, plus quotes, contracts, invoices, and customer accounts for studios. Media sits on local disk or any S3-compatible bucket, OIDC single sign-on lets a team log in through an identity provider, and API tokens and webhooks connect PicPeak to automations. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Write one post and Shoutrrr publishes it across X, Bluesky, LinkedIn, Facebook, Instagram, Threads, and Discord at the same moment, or holds it in a queue until the slot you picked. The composer counts characters against each network's limits as you type, attaches media with alt text, adjusts wording per platform when a message needs a local tweak, and splits long posts into threads where the network supports them. Recurring posting slots follow your workspace timezone, drafts drop into those slots from a month calendar, and anything can still go out instantly when news breaks. Every target publishes independently and retries on its own when a network hiccups, leaving a per-attempt trail you can inspect instead of a silent failure. Analytics chart follower and post-count trends for each account and report likes, reposts, replies, and impressions per post wherever the network's API allows. Teams share workspaces with role-based memberships and email invitations, keep clients in separate workspaces, and get in-app alerts the moment a post lands, fails, or needs an account reconnected. Account tokens sit encrypted at rest and refresh themselves, sign-in supports two-factor codes and passkeys, and the built-in MCP server hands AI assistants 22 tools to draft and schedule while publishing, retrying, and deleting refuse to run without your explicit confirmation. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

A year of searchable logs and traces no longer needs a metered logging service, because Rootprint keeps the whole index in a storage bucket you already own. A search matches any word on any line, since every log is indexed in full and no service name, stream, or label is needed first. A frequency histogram, one-click field filters, and saved views narrow the results, a fold mode collapses repeated lines, and exports arrive as NDJSON, CSV, or plain text, or as a share link. Open a trace from the log that emitted it, or paste a trace ID, and a waterfall shows per-span timing, attributes, events, and database calls grouped by query, with each span linking back to its logs. The trace explorer charts span volume, error rate, and p50, p95, and p99 latency, ranks the busiest operations, and filters spans by service, duration, and status. Every service gets its own page with request rate, error rate, operations, dependencies, and errors. Data arrives over OpenTelemetry from the Collector, Vector, or Fluent Bit, through a plain HTTP gateway, or by pulling from Kafka, Kinesis, or SQS, with guided setup for nine integrations. Indexes can live in S3, Google Cloud Storage, R2, MinIO, or Azure Blob. Teammates sign in with Google, GitHub, or any OpenID Connect provider, and scoped API keys serve scripts. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

"Somewhat lightweight, low-friction" is how Silicon Notes' author describes the personal knowledge base - written after DokuWiki's editor "drove me mad" and no existing wiki quite fit. The philosophy is that small frequent annoyances compound into cognitive load with no return, so everything here is optimized for frictionless daily use. Notes are written in plaintext Markdown and rendered as clean HTML with Pygments syntax highlighting for code blocks; pages get bi-directional relationships (backlinks), so the knowledge base becomes a connected web rather than a folder tree; and full-text plus title search retrieves anything fast. A table of contents lives in the left sidebar - "where it belongs" - editable while you read without scrolling away. Page history tracks revisions for auditing and rollback, JSON export/import keeps everything portable, and the mobile layout is genuinely usable. The stack is deliberately minimal: Python and Flask with Mistune for Markdown and SQLite for storage - no big frameworks, just a few small dependencies. One honest caveat: there is no built-in authentication, so deploy it behind a VPN, private network, or reverse-proxy auth layer. For a solo engineer's brain, it is exactly enough.

Write a post once in LightPost and it goes out to Bluesky, Mastodon, X, Instagram, Threads, Discord, LinkedIn, Telegram, and Facebook Pages on your schedule, with YouTube video uploads handled in the same workspace, from a dashboard running on your own server. The composer fans one message out to every connected account, including several accounts on the same platform, and each destination can receive text, images, or both within that network's limits. Drafts can be saved, edited, and duplicated, and scheduled times follow your browser's timezone so a week of announcements can be queued in one sitting. Images come in from public JPEG links or a saved library, with alt text and a preview before anything ships. Every delivery is tracked per account with links to the published posts, and when one network fails you retry just that destination instead of blasting the successful ones twice. The queue persists across restarts and overdue posts resume on their own, so an overnight reboot never eats a scheduled campaign. Built-in setup guides walk you through eligibility, credentials, and permissions for each platform, account connections can be verified or reconnected from the same panel, and your credentials stay encrypted on your disk with optional password protection and exportable post history. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Folio is a self-hosted team wiki that stores every page as a plain Markdown file in a Git repository you own, while your team writes together in the browser in real time. People work in Reading, Live edit, or Source mode, keep editing offline until the connection returns, and watch changes land in the page history as commits they can restore. Data tables with nine column types, filters, and views sit beside the documents, and forms write submissions straight into those tables without requiring an account. Whiteboards, Mermaid diagrams, and a visual diagram editor cover the pictures, while uploads like PDF, Word, Excel, and PowerPoint files open as previewable pages inside the tree. Confluence spaces import with their trees, images, and whiteboards converted, so a migration keeps its structure instead of flattening into a pile of attachments. AI agents read and write the same pages through an MCP server with 41 tools, authenticated by personal tokens or OAuth 2.1, and the built-in assistant answers questions read-only or makes supervised edits. Administrators control access down to a single page, sign people in with SAML, SCIM, or OpenID Connect, hand out expiring share links, and publish a space as a public read-only website. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Zublo rounds up every recurring payment quietly draining your accounts and puts them all in one place where they cannot surprise you anymore. Add each subscription once with its amount, billing cycle, next due date, and the card it charges, and the dashboard keeps the running total visible instead of letting fifteen small charges pretend to be no money at all. A calendar shows the month ahead as actual payment dates, so the week when the annual domain, the streaming bundle, and the cloud bill all land together stops being an ambush. Reminders arrive before renewals while cancelling is still an option, and statistics break spending down by category and trend so you can see which corner of your digital life keeps growing. Subscriptions in other currencies convert at synced rates, keeping foreign services honest in the totals. When you want a second opinion, an optional assistant can chat about your spending, flag subscriptions worth reviewing, and point at patterns, using a provider you choose, including a local model that never phones home. Scoped keys open the data to your own scripts, and two-factor sign-in guards the vault. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

A federated bookmark manager written in Rust: Ties (formerly linkblocks) is your own small corner of the web for saving, organizing, and sharing good pages, connected to the fediverse over ActivityPub. Instead of rigid folders, bookmarks live in arbitrarily nested lists that link together into a knowledge graph. Saved pages are fetched, converted to a readable archived version, and stored in the database, so full-text search covers titles, URLs, and the actual page text - and the content survives if the original disappears. The federation model is deliberately anti-viral: there is no global timeline and no algorithmic feed. You publish public lists for anyone, follow users whose taste you trust, and mark trusted users whose bookmarks become part of your search range - extendable to trusted-users-of-trusted-users for a wider net. Public bookmarks post to Mastodon timelines, and WebFinger lookup makes your handle discoverable across fediverse platforms. Operationally it is about as light as web software gets: a single binary with all assets baked in, integrated TLS so it can run without a reverse proxy, PostgreSQL as the only dependency, OIDC single sign-on, and a bookmarklet for one-click saves. Note the project is alpha: single-user instances only, and all data should be considered public. AGPL-3.0 licensed, built with Rust and htmx.

Only the person holding the link can open what you share with SkySend, a self-hosted file and note sharing service that encrypts everything in the browser before it leaves your device. Sending a contract? Drop in the file, several files, or a whole folder, and share the link. Need documents from a client? Send an upload link instead, and whatever comes back is encrypted for you alone. Handing over a password or an SSH key? Write it into a note that burns after reading. Notes can mix text, Markdown, generated passwords, and highlighted code in a single page. Every share can expire by time, stop after a set number of downloads or views, and carry an optional password as a second lock. The command-line client uploads, downloads, and reads notes with the same encryption, and its full-screen mode shows each link as a QR code. No accounts are needed: My Links keeps your shares in the browser, and optional OIDC sign-in limits who may create them. Encrypted uploads sit on local disk or any S3-compatible bucket, and the interface offers 13 languages and three themes. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

When you want honest traffic numbers without tracking cookies or stored IP addresses, Liwan puts a real-time analytics dashboard on your own server. The dashboard ranks pages, referrers, countries, browsers, platforms, and devices, charts visitors over time, and filters out bot traffic by default. Session metrics add bounce rate, average time on site, and entry and exit pages, while UTM fields attribute visits to campaigns. Collection is adjustable globally and per site: choose how visitors are grouped, whether to store country and city, country only, or no location, and how long events are kept. Drop rules discard internal, test, and local traffic before storage, and a pruning tool applies new settings to history after a dry-run preview. Tracking is one line of HTML, or your own server can send events with custom names and properties. Location can come from a MaxMind database or from Cloudflare, Vercel, and other proxy headers. One instance holds several projects and sites, with team accounts and single sign-on through Google Workspace, Microsoft Entra ID, or an OpenID Connect provider such as Keycloak or Dex. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Docker Updater puts you back in charge of container updates: it watches your registries for newer images, and nothing updates until you approve it, so no database restarts itself at dinner. Polls run on a schedule you set, and each container card shows the newer image waiting before anything is pulled. The check costs nothing: it compares the digest your container runs against the registry manifest without pulling a byte, across Docker Hub, GHCR and other Bearer-token registries. Read the last five GitHub releases for an image before committing, update one container or a batch, and watch the pull percentage, layer count and recreation step stream live on the card. If the new container fails to start, the old one returns automatically, and you can keep a backup even after a clean update. Not ready? Defer an update for 7, 14, 30 or 90 days, or indefinitely, and it leaves your notifications alone until then. Several Docker hosts join the same dashboard over SSH or TCP with health indicators, and Compose stacks restart together so services find new addresses. Notifications arrive through an auto-generated ntfy topic or your own Apprise URL, every update keeps a persistent log, and a reclaimable-images view shows what disk space old images hold. The dashboard serves on port 9090 in English or Simplified Chinese, with optional login. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Page views, funnels, session replays, error reports, Core Web Vitals, and uptime checks share one cookieless dashboard in Betterlytics, so teams stop stitching several tools together. The overview charts visitors, page views, bounce rate, and visit duration against the previous period, and annotations mark launches or campaigns right on the timeline. Breakdowns cover referrers, channels, UTM campaigns, browsers, devices, and operating systems, with visitor locations on a world map once an optional MaxMind key is added. Custom events, global properties such as plan or app version, and outbound link tracking show what visitors actually do, while user journey diagrams and funnels reveal where they drift away. Session replay is opt-in per tracking script, masks text and form inputs by default, and can keep recordings in your own S3-compatible bucket. Error tracking groups JavaScript errors with stack traces, a session trail, and a link to the matching replay. Uptime and SSL monitors alert through Slack, Discord, Teams, or webhooks and feed public status pages on your own domain. Teammates join by invitation, two-factor login is available, and a built-in MCP server lets Claude, Cursor, or Codex answer traffic questions. A script of about 3.5 KB or a WordPress plugin handles installation. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Your coding agents finish a session, close the laptop, and forget everything; Pad is where the project remembers. It holds the tasks, plans, bugs, ideas, and decisions in one workspace that you drive from a browser while your agents drive it from the terminal, so the next session, human or machine, picks up exactly where the last one stopped. You plan on boards, lists, and tables with drag-and-drop status columns, rich item pages, comment threads, and a dashboard that answers what needs attention and what to do next. Your agents read the queue, claim items, leave checkpoints, link their pull requests, and mark work fixed with the fixing PR attached. Conventions teach them the house rules once, like running tests before calling a task done, and playbooks hand them repeatable multi-step workflows they can invoke by name. Every change is versioned with its author, a person or a named agent, and new items appear in the browser the moment an agent creates them in the terminal. The same workspace is reachable three ways: the web interface, the pad CLI, and a bundled MCP server with a natural-language skill that plugs into Claude Code, Cursor, Codex, Windsurf, OpenCode, Copilot, Amazon Q, and Junie. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

CRM mechanics applied to your actual relationships instead of a sales pipeline: Nametag is a Personal Relationship Manager (PRM). It exists to fix the things you keep forgetting: when you last talked to an old friend, their kids' names, the birthday you missed twice. Contacts are tracked with flexible attributes - names, birthdays, important dates, and free-form notes for everything else - and organized into custom groups. Where it goes beyond a contacts app is relationship mapping: you define how people connect to each other (family, friends, colleagues, or custom relationship types), and an interactive D3.js-powered graph renders your entire personal network so you can see clusters and connections at a glance. Staying in touch is automated: scheduled reminders fire for birthdays, important dates, and reach-out nudges, with optional email delivery via a Resend API key for password resets and reminder notifications. Built with Next.js, it is mobile-responsive, ships with full dark mode, and supports multiple languages including English and Spanish. Because it is self-hosted, there are no account tiers or contact limits - unlimited people and relationships, with every note about your personal life stored on your own server rather than a social-graph company's cloud. A lightweight, single-container deployment makes it one of the easiest personal tools to run.