Traffic Source answers the three questions every site owner actually asks: who showed up, where did they come from, and did they pay. The live dashboard counts visitors in real time alongside pageviews, sessions, bounce rate, and session duration, with no cookie banner required because tracking uses no cookies at all. Referrer and UTM breakdowns show exactly which campaigns, newsletters, and posts earn their traffic, while country and city data arrives through proxy headers. Visitor journeys replay every page a person viewed before converting, so you can see the path from first click to checkout instead of guessing. Connect Stripe once and payments are matched to the sessions that produced them automatically, with no webhook plumbing to maintain. The affiliate system lets you create partners with custom commission rates and shareable referral links, and each affiliate gets a public dashboard showing their own clicks and earnings. Search Console data is pulled into the same screen, where a keyword explorer shows the pages, countries, and devices behind any query. One tiny tracking script covers all your sites, including single-page apps. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Anyone who pays for Claude Code, Codex, and Gemini CLI separately ends up juggling three endpoints, three sets of keys, and three kinds of rate-limit surprise, and CliRelay collapses all of that into one self-hosted gateway with a control panel. Clients speak the OpenAI Chat or Responses, Anthropic Messages, or Gemini protocol, and CliRelay translates each request for whichever upstream account is healthy. Channel groups limit where each key may send traffic, round-robin, fill-first, and session-sticky scheduling spread it, and cooldowns with automatic failover move requests off accounts that have run out of quota. Add upstreams from the /manage console through browser sign-in, device codes, or bulk credential import, covering Claude, Codex, Gemini, Antigravity, Vertex AI, AWS Bedrock, Grok, Qwen, Kimi, and any OpenAI-compatible service. Portal accounts own client keys with daily, period, and lifetime quotas, RPM and TPM limits, and per-model pricing. A monitor center scores health and charts live traffic, P50 to P99 latency, and time to first token, while every request lands in a searchable log with tokens, latency, and cost. Tenants, roles with resource.action permissions, content moderation profiles, an outbound proxy pool, and an audit trail make shared deployments workable, and the console speaks English, Simplified Chinese, and Russian. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Terrapod gives you the Terraform Enterprise control plane on your own Kubernetes cluster, with remote state, run approvals, and policy checks, and no per-resource bill at the end of the month. Point your existing cloud block at it and terraform or tofu keep working unchanged, because Terrapod answers the same backend protocol the CLI already speaks. Workspaces isolate state, variables, and runs per team or environment, with versioned state you can lock, inspect, and roll back. Server-side agent pools execute plans and applies on ephemeral Kubernetes jobs, while CLI-driven runs stay available for local workflows. Approvals gate every apply, and conditional auto-apply only proceeds when a plan adds or updates resources without destroying anything. Label-based RBAC decides who may read, plan, write, or administer each workspace, with OIDC and SAML single sign-on on top. A private registry hosts your own modules and providers with GPG signing, and OPA Rego policy sets enforce rules as mandatory or advisory checks before apply. Drift detection flags infrastructure that wandered from its state, run triggers chain dependent workspaces, and an interactive impact graph shows a plan's blast radius before you approve it. Optional AI review summarizes each plan's changes and risks, and an MCP server lets AI assistants inspect workspaces and runs under the same permissions. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MPL-2.0 licensed.

Thousands of frames land on the card after a wedding shoot, and Facet finds the keepers among the bursts, blinks, and near-duplicates. Facet scores every photo across nine dimensions, aesthetic quality, composition, face quality, eye sharpness, technical sharpness, color, exposure, subject saliency, and dynamic range, with category-specific weights for portraits, landscapes, wildlife, and 30-plus other content types. The culling darkroom groups bursts and visually similar frames, protects exposure brackets and panorama sequences, and flags closed eyes per face, so you keep the sharpest open-eyed frame and reject the rest in one pass. Face detection clusters into people you can rename, merge, and search, while albums, star ratings, favorites, and AI content tags organize what survives. Browse survivors through a mosaic gallery with semantic search by plain description, a timeline, a geotag map, and slideshow capsules. Statistics dashboards track your gear usage and metric correlations, and the weight editor learns from A/B comparisons so scores drift toward your own taste. Shared album links support client proofing with hearts and comments, phones auto-upload over the built-in WebDAV inbox, and ratings round-trip to Lightroom, darktable, and Immich through XMP sidecars. Everything runs locally on your own hardware: no cloud accounts, no subscriptions, no photo ever leaves the server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

The file is on your laptop, the laptop is downstairs, and cloud drives are still syncing yesterday; Local Content Share ends that dance by giving every device on your network one shared page on port 8080. Type or paste a snippet and it appears instantly on your phone, tablet, and work machine, because Server-Sent Events push every upload, edit, and deletion to all open browsers without a refresh. Files ride along three ways: pick them, drag several at once onto the text area, or paste straight from the clipboard, screenshots included. A separate notepad holds Markdown with edit and preview modes, auto-saving as you type so a thought started on the couch continues at the desk. Links get their own newest-first section, everything can be renamed or edited in place, and each item carries an expiration clock you can set to an hour, a day, or a custom span like 34m or 2w, after which it quietly deletes itself. The interface follows your system light or dark theme, installs as a phone PWA, and needs no accounts and no internet, which is also the honest catch: there is no login, so keep it on trusted networks or behind an authenticated proxy. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Describe an app in one sentence and sandboxd, a self-hosted AI app builder, has a coding agent build it in an isolated sandbox and hand back a live preview URL. Start from a blank prompt, a React, Next.js, Express, or FastAPI starter, or an imported public Git repo. Refine it in one persistent chat beside Preview, Code, Terminal, and Git tabs. Pick OpenCode, Pi, or Claude Code. Point OpenCode or Pi at local or remote OpenAI-compatible and Anthropic-compatible endpoints, LiteLLM gateways included. A proxy injects provider keys on the wire, so nothing secret lands in a sandbox. Did the agent get it wrong? Every task is checkpointed first, so one click reverts the turn. Snapshots, forks, and named versions keep known-good points to branch from. Edit files in the browser, review file-by-file diffs, commit, and push. Secrets are write-only and encrypted per app. Idle sandboxes sleep and wake on the next request. One modest server can host per-user previews, coding playgrounds, or an agent platform. The app library installs 80+ curated open-source apps, such as Ghost, n8n, Gitea, and Grafana, each in its own sandbox. Every console action is also a /v1 HTTP call with an OpenAPI spec. Upgrades back up the database, health-check the new version, and roll back on failure. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Scattered browser tabs, buried wiki folders, and disconnected issue trackers fragment engineering context across too many tools, which is why Ideon unifies your repositories, notes, and tasks on a shared infinite canvas. Rather than forcing projects into rigid folder hierarchies, you arrange interactive blocks spatially on a two-dimensional map where related documents, checklists, calendar schedules, and code references sit right beside one another. Teams can embed live repository cards and open issue streams directly from GitHub, GitLab, Gitea, and Forgejo onto the workspace, keeping code status visible alongside architecture documentation. Rich content blocks render Markdown notes with threaded comments, Mermaid flowcharts, uploaded files, images, and bookmarked links on the same board. Real-time multiplayer collaboration lets teammates edit blocks simultaneously, follow live cursors across the canvas, and map system designs together without edit conflicts. Built-in Time Travel snapshots capture historical states of the workspace so you can scrub backward to review how a project evolved or trace past design decisions. You can even synchronize an entire project canvas directly to a Git repository, storing notes and spatial block layouts as versioned files. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

When the power blinks at 3 a.m., NUT WebGUI is the page that tells you whether the UPS in the closet is coasting or dying, without a serial cable in sight. Point it at one or several Network UPS Tools servers and it polls charge, load, input voltage, and estimated runtime, refreshing critical status every couple of seconds while background variables update on a calmer thirty-second cadence. The dashboard renders device cards, gauges, sparklines, and a topology view of how units chain together, and it stays readable on a phone when you are standing in front of a humming rack. Authorized users can issue instant commands, set variables, or trigger a forced shutdown from the browser, while everyone else gets a strictly read-only view. A JSON API under /api serves device lists, variables, and instant commands to your own scripts, health and readiness probes fit container orchestrators, and OpenMetrics output feeds Prometheus without extra exporters. The whole thing is a single small binary that runs happily on a Raspberry Pi, an old ARM board, or a RISC-V box, reads one TOML file, and supports multi-user sign-in with scoped API keys when you share it with a team. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Publish high-resolution photography without social media compression using ChronoFrame, a self-hosted portfolio and gallery platform built around EXIF camera telemetry, live motion media, and interactive map exploration. Drop JPEG, PNG, WebP, TIFF, or HEIC images alongside paired MOV clips into the browser uploader, and the background task queue automatically extracts camera bodies, lenses, focal lengths, shutter speeds, and RGB histograms while pairing Apple Live Photos and Motion Photos for hover playback. Visitors browse your work through a responsive masonry grid with instant ThumbHash placeholders, inspect fine details inside a hardware-accelerated WebGL tiled viewer, or explore shooting locations on an interactive MapLibre or Mapbox globe powered by reverse geocoding. Curators can group shots into reordered albums, protect private collections with passwords, edit ratings and metadata in bulk, and generate custom share preview cards. Storage scales across local disks, S3-compatible buckets, and OpenList backends with configurable CDN delivery. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Large link collections stay fast and organized in Faved, a private, self-hosted bookmark manager built for exactly that job. Its core is a nested tagging system that outgrows flat folders: place Go and Python under Programming Languages, color-code tags, add descriptions, pin frequent ones to the top of the sidebar, and optionally roll up child-tag items into parent views. Saving is frictionless - a lightweight bookmarklet works in any desktop or mobile browser without extensions, and Apple devices can send links through the native Share menu. Faved fetches titles, descriptions, and preview images automatically, keeps that metadata fresh over time, and flags duplicates as you save. Instant as-you-type search, flexible sorting, and bulk actions (retag, delete, refetch) keep collections of any size manageable, while customizable layouts - card, list, or table - plus a system-synced dark mode adapt the interface to your workflow. Migration is first-class: import from Chrome, Safari, Firefox, or Edge with folder structure preserved, or move from Pocket and Raindrop.io keeping tags and collections. The stack is deliberately light - PHP 8 with SQLite behind a React/Tailwind frontend - deploying via Docker with no external dependencies. All data stays local: no ads, no tracking, and no risk of your library vanishing with a discontinued service.

Configuring recurring cron jobs via version-controlled YAML manifests becomes seamless with GoCron, giving systems engineers and DevOps administrators a responsive web console to orchestrate scheduled commands with hot-reloading and sandboxed execution. Administrators can declare schedules using standard five-field cron syntax, establish global default configurations, and inherit execution timeouts, retry policies, and environment variable expansions across individual tasks. The interactive web interface provides immediate visibility into upcoming runs, past execution durations, status badges, and expandable terminal output logs stored in local SQLite databases. Operators can trigger ad-hoc job runs on demand, cancel stalled processes, and utilize a built-in sandboxed terminal utility governed by strict command whitelists. Automated health check webhooks dispatch HTTP notifications to external monitoring services upon job initiation, successful completion, or unexpected execution failure. The container environment bundles common server utilities including Restic, BorgBackup, and Rclone, streamlining automated offsite database backups and cloud storage synchronization routines without additional dependencies. Dynamic configuration reloading automatically detects filesystem modifications to YAML manifests without restarting the daemon, ensuring zero-downtime schedule updates. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

CrowdSec Web UI provides a centralized web console for monitoring intrusion detection telemetry, managing firewall remediation decisions, and auditing security events across multiple CrowdSec security engines. Administrators can connect several CrowdSec Local API endpoints simultaneously, aggregating threat intelligence and active bans into a unified visual interface. The dashboard displays geographic origins of attacking IP addresses, active remediation durations, and specific scenario triggers such as brute-force authentication attacks or web vulnerability probes. Operators can search through historical alert logs, inspect raw HTTP request details, and drill down into individual IP behaviors to differentiate authentic threats from false positives. Manual intervention tools let security teams enforce custom IP bans, adjust expiration timers, or immediately revoke erroneous bans across all connected bouncers with a single click. Integrated notification pipelines dispatch real-time security alerts to external destinations including ntfy, Gotify, and MQTT message brokers whenever critical thresholds are breached. Built-in Prometheus metrics dashboards visualize processing latencies, parser throughput, and decision counts over customizable time windows. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

When a ClickHouse cluster slows down, the answers are buried in system tables nobody wants to query by hand; CHMonitor turns those tables into an operations dashboard that explains what the cluster is doing and what to fix next. Live views cover running queries with elapsed time, memory, and a kill action, while history, failed, slowest, and most-expensive pages rank finished work by CPU, duration, and rows read, each with the full statement and one-click EXPLAIN. Thread-level analysis shows how a single query parallelized, and per-user summaries reveal which analyst or service is eating the cluster. Beyond queries, you get a merge and part-lifecycle timeline, replication queue and Keeper health, a live topology map of shards and replicas, storage breakdowns by database, table, and part, and a query activity heatmap spanning a year. An AI advisor reviews the workload and recommends skip indexes, projections, PREWHERE clauses, and TTL changes ranked by impact, with an MCP interface and built-in agent for asking questions in plain English; it recommends only and never applies DDL. Threshold-based health checks alert to Slack, Discord, PagerDuty, or Opsgenie, multiple ClickHouse hosts are watched from one dashboard, and a companion terminal UI covers quick checks from the shell. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Every cable, switch port, VLAN, and rack unit in a homelab or small server room gets a documented place in Rackpad, a self-hosted inventory and operations workspace. Rack elevations show mounted gear, including paired half-width appliances. Switch-panel port maps and aggregate ports show what is patched where. Cables carry type, length, and color, editable in bulk. VLANs, subnets, DHCP scopes, reservations, and zones sit in one Networks workspace, with gateway and DNS protection and a mismatch review for IP assignments. Storage topology follows drives, bays, and pools that span several devices. Wi-Fi controllers, access points, hypervisor hosts, and virtual machines have pages of their own, and Proxmox and Hyper-V hosts can be imported after review. Discovery scans a subnet or any CIDR and stages every finding in an inbox. Per-device checks over ICMP, TCP, HTTP, HTTPS, and SNMP raise alerts by email, Discord, or Telegram. Everything feeds a movable topology map. Markdown runbooks attach to devices, and an audit log records every change. Admin, editor, and viewer roles control access, and OpenID Connect login is optional. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Feature requests, bug reports, upvotes, and a public roadmap: Astuto (Ruby on Rails backend, React frontend) gives users a Canny-style feedback portal so product decisions rest on visible demand rather than the loudest voice in the room. Feedback organizes into as many boards as you want (features, bugs, integrations), each post carrying a custom status you define - "planned," "in progress," "shipped," or whatever matches your process - and those statuses feed a public roadmap view showing users what is actually being worked on. Participation friction is adjustable at both ends: sign-in works with plain email or any OAuth2 provider, anonymous feedback can be enabled for unregistered users, and a moderation queue lets you approve posts before they appear when spam is a concern. Integration hooks are practical rather than sprawling - webhooks fire on events to connect Jira, Trello, or Slack, and a REST API manages the whole feedback space programmatically. Brand customization, an invitation system, private-site settings, and recap emails for administrators complete a deliberately minimal tool: it collects, organizes, and prioritizes feedback well, for free, forever.

Run every TV, menu board, kiosk, and video wall from one browser dashboard with ScreenTinker, a digital signage CMS you host yourself, with no per-screen license fees. Players cover Android TV, Fire TV, Samsung Tizen, LG webOS, Amazon Vega OS, Roku, Raspberry Pi, Windows, ChromeOS, and any web browser. Upload images and video, turn each PDF page into a slide, or design animated decks in the slide editor with templates, optional voiceover, a music bed, and an optional AI designer that works from a prompt using your own model endpoint. Widgets add clocks, weather, RSS tickers, moderated social walls, live IPTV streams, and iCal or JSON data bound straight into a slide. A weekly calendar handles recurring schedules, priorities, and time zones, and Preview at shows what a given screen will play at any chosen moment. Group screens to push playlists and bulk commands, split displays into zones, or join several panels into a video wall with bezel compensation. Live remote control, CSV proof-of-play reports, and offline email alerts keep a fleet in check, while web and Android players cache content and keep playing through outages. Workspaces, six role levels, optional approval before publishing, OIDC single sign-on, white-label branding on your own domain, and a scoped REST API serve agencies and larger teams. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Maintenant replaces three to five separate monitoring tools with a single Go binary that consolidates container discovery, endpoint monitoring, SSL tracking, resource metrics, and public status pages without requiring any external database. The embedded Vue 3 frontend serves on port 8080 immediately after deployment, auto-discovering Docker containers and Kubernetes pods through direct socket and API access without configuration. HTTP and TCP endpoint monitoring validates availability with configurable intervals, while TLS certificate tracking alerts before expiration across all monitored domains. Resource metrics collect CPU, RAM, network throughput, and disk usage per container with real-time Server-Sent Events streaming to the dashboard. Heartbeat and cron monitoring accepts pings from external scheduled jobs, triggering alerts on missed check-ins via webhook callbacks and Discord notifications. The built-in alert engine supports escalation rules and notification batching. Public status pages expose component health to end users without authentication, customizable per monitored service. Network security insights analyze exposed ports, container privilege levels, and host configuration to produce a posture score. Update intelligence scans OCI registries to detect available container image updates with digest comparison. The REST API with SSE broker enables automation, and the integrated MCP server provides tooling for AI assistant integration. SQLite in WAL mode stores all data with zero operational overhead. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Papyra gives you a calm, private home for notes that stays as easy as sticky notes while quietly linking everything together like a wiki. Cards pin, colour, and drag into place on your desk, and opening one drops you into an editor where slash commands insert headings, checklists, tables, or maps without leaving the keyboard. Type two brackets to link another note, and backlinks gather the other direction automatically, following the note even if you rename it. Notes save themselves, and every earlier version is kept, so you can scrub back through history and restore the draft you actually wanted. Sharing a note lets several people type in it together with visible cursors, comments in threads, and mentions that bring the right person in. Private notes lock behind a PIN or your fingerprint and sit encrypted on disk, while a daily journal page collects the day with a mood and a calendar to browse the year. Search covers notes, to-dos, and attachments with highlighted matches, and image text and audio transcripts can join the index. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.