"Stupid simple software" is the entire philosophy at DumbWare.io, and DumbBudget delivers it: no over-engineering, no complexity, no accounts, no bank connections - just a clean, modern ledger for money in and money out. Log income and expenses, assign categories, and watch real-time balance calculations update as you type. Finding transactions is quick: filter by type, narrow by date range, sort by date or amount. When tax season or spreadsheet analysis calls, everything exports to CSV. Access control matches the philosophy - a single PIN (set via one environment variable) gates the app, backed by real security engineering: rate limiting on PIN attempts, temporary lockout after failures, secure session handling, and no sensitive data in browser storage. Multi-currency support covers the ISO codes, and a SITE_TITLE variable names each instance - deliberately useful, because running separate instances per account or family member is the intended pattern for multi-user needs. The responsive UI ships light and dark themes and installs as a PWA on phones, where expense logging actually happens. Configuration is five environment variables; data persists in one folder. If Actual Budget and Firefly III feel like accounting software, this is the notepad that gets used. GPL-licensed.

Your front desk phone rings at midnight and nobody sane is awake; QuickVoice answers it with an AI agent you configured, on servers you own, with call recordings you control. Build agents in the web console: write the prompt, pick speech-to-text, language model, and voice, set the first message, then link a real phone number from Twilio or Telnyx through LiveKit SIP trunks. Inbound callers get a receptionist that answers questions from your uploaded knowledge base, PDFs and web pages chunked and embedded for live retrieval, while outbound mode fires single quick calls or batch campaigns for reminders and follow-ups. Agents can invoke allowlisted MCP tools mid-call, so checking an order status or booking a slot happens inside the conversation instead of after it. Every call lands in the log with transcript, recording, and metadata, searchable from the analytics dashboard, and privacy controls redact personal data by default, can suppress recordings entirely, and sweep old transcripts on a retention schedule. Multi-language voices, per-agent runtime overrides for campaigns, organization accounts with API keys and audit logs, and Stripe billing hooks round out a platform built for teams who would rather inspect their voice stack than rent a black box. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

WechRSS brings WeChat Official Accounts back into your RSS reader, turning accounts that normally live inside a closed app into ordinary feeds you control. Paste any article link from an account and the tool identifies the publisher automatically, without hunting for obscure account parameters. Connect WeChat Reading by scanning a QR code in the web interface, and the session renews itself when possible so subscriptions keep flowing. Each account gets its own independent feed with its own sync schedule, item count, and on or off switch, so noisy publishers can be slowed down and favourites checked more often. A background scheduler keeps article titles, publication times, covers, and summaries up to date, with sync attempts, successes, and the latest new article all visible at a glance. Everything is stored locally, so your subscription list and credentials never sit on someone else's server. A first-time subscription wizard walks you from QR login to seeing the first article in your reader, saving progress if you get interrupted. Reader-specific links can be generated per account, letting a cloud reader fetch a feed without handing out management access. Health diagnostics flag expired logins, verification requests, and long sync gaps with concrete recovery steps. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Written in optimized C++ where competitors use Python or Java, NZBGet saturates fast connections while idling on CPU and RAM - which is why the performance-obsessed Usenet downloader has long been the client of choice for NAS boxes, Raspberry Pis, and routers as much as full servers. The engineering shows in the recovery pipeline. Instead of shelling out to par2cmdline, NZBGet integrates the par2 source directly and exploits its knowledge of exactly which articles failed - quick par-verification checks only what needs checking, and its own multicore repair implementation runs 2-3x faster than the external tool on the same hardware. Fast par-rename deobfuscates scrambled filenames in seconds without a full verification pass, and rar-rename recovers names for multivolume archives even when no par2 files exist. DirectWrite assembles articles straight into sparse destination files, skipping temporary-file churn entirely, with an article cache and queue-pausing options to eliminate disk contention. Automation is complete: a remote web interface, full JSON-RPC API, RSS feeds with duplicate detection, scheduling and prioritization, and an extension manager for Python and Bash scripts triggered by download events. Sonarr, Radarr, and every major indexer integrate natively.

Zeabur is a self-hosted web platform that deploys and runs your services on your own Kubernetes cluster, presenting the cluster as simple projects and services instead of raw manifests. Every change starts as a readable plan listing the exact fields it will write and who owns them today, and nothing is applied until you confirm it. When something breaks, Zeabur says so in plain words and points at the fix: a worker that restarted fourteen times gets a button straight to the logs from the run before the restart. You deploy from Git repositories, from an uploaded folder or ZIP archive, or directly in the dashboard, then follow live logs, open a terminal inside a container, and watch CPU and memory move over time. Projects are namespaces and all state lives in Kubernetes objects, so there is no Zeabur database to back up, and uninstalling the platform leaves your Deployments, Services, and Ingresses running untouched. Companion pieces add passkey sign-in for kubectl with tokens that expire in minutes, image builds from Git through a BuildKit operator, and a catalog of cluster components and app templates. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Simon is a lightweight self-hosted system monitor that shows live CPU, memory, disk, and network metrics for your server and its Docker containers in one web dashboard, with threshold alerts and a built-in file browser. Open the dashboard to watch real-time gauges alongside historical charts, so a slow memory leak becomes visible hours before it takes a service down. Every running container appears with its own CPU and memory stats, and its logs open in a searchable viewer, so routine diagnosis never needs a terminal session on the host. The file browser lets you navigate the directories you choose to expose, preview file contents, upload with drag and drop, create folders, and move or delete items. Downloads support range requests, which means large files resume cleanly after a dropped connection and media files stream instead of failing halfway. Alert rules fire when CPU, memory, disk, or network activity crosses thresholds you set, and notifications arrive through Telegram, ntfy, Gotify, Pushover, Pushbullet, Matrix, or any custom webhook. Prebuilt notification templates get common setups running in minutes, and password authentication keeps the dashboard private on a public server. Resource-constrained machines benefit most: the monitor runs comfortably on single-board computers and small instances where heavier monitoring stacks would consume the very memory they exist to watch. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Tome is a self-hosted ebook library that knows how you read, not just what you own, syncing your place between an e-reader and the browser while turning every session into statistics. Its TomeSync plugin for KOReader records time on page, pages turned, and device, then syncs positions bidirectionally and works fully offline, queuing sessions until you reconnect. Browse and bulk-download whole series from the e-reader menu, with stable book IDs keeping history intact when files change. Reading stats grow sharper the more you read: streaks, time-of-day heatmaps, pace, completion estimates, author affinity, and per-book breakdowns fill three insight tabs. The built-in reader opens EPUBs with themes and font controls, manga in page, spread, or webtoon scroll modes with RTL support, and PDFs directly. Volumes group into series with arcs and status badges, so a forty-volume saga reads as one story. Metadata arrives from Hardcover, Google Books, and OpenLibrary with a side-by-side diff and cover picker. A Bindery inbox reviews incoming files before they join the library, and the OPDS catalog serves KOReader, Panels, or any OPDS client with per-user PINs. Admin, member, and guest roles govern per-book visibility behind API tokens. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

ScribeCrate is a self-hosted speech-to-text API that turns recordings into transcripts, subtitles, and English translations on your own server. It speaks the OpenAI Whisper API fluently: point any compatible client at your server's address, swap in your API key, and uploads come back as text. Ask for plain text, JSON with timestamps, or ready-to-publish SRT and WebVTT subtitle files, and for long recordings the segments can stream back over SSE as they are decoded. Turn on speaker diarization and every segment is labeled with who is speaking, which makes interview and meeting transcripts readable at a glance. Choose the model that fits the job, from tiny for quick drafts to large-v3 for maximum accuracy, and run it on a modest CPU, a Raspberry Pi class ARM board, or an NVIDIA GPU. Almost any recording works: MP3, M4A, WAV, WebM, OGG, and FLAC are all accepted, and with models cached in advance the server keeps transcribing with no internet connection at all. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Pictaria Server sits beside your Immich instance and makes a photo library of thirty thousand images legible again, surfacing the trips, people, and best shots buried under duplicate bursts and forgotten folders. It starts with Insights: a clickable timeline of your years, detected trips, a people constellation linked by who appears together, place and camera rankings, and records like your busiest day. Click any number and you land on the actual photos, ready to open in Immich, turn into an album, or send onward. Enrich puts an AI to work describing what it sees, writing captions, menu-driven tags, and quality scores for every photo using a local model through Ollama or LM Studio, or a cloud provider with your own key, on a scheduled daily budget. Those tags can sync back into Immich, so searching improves everywhere, not just here. Curate then collapses bursts and near-duplicates into stacks with a suggested keeper, and one keystroke keeps the best and skips the rest. Smart Albums compose rules from people, places, dates, cameras, and tags, preview the result count, and maintain real Immich albums on a schedule. Frame owners get remote control, display metrics, and voice photo questions, while the Activity feed and runtime-editable Settings keep the whole box manageable from the browser. It connects with a limited-permissions API key and cannot delete a single photo. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

One self-hosted workspace holds your team's chat, tasks, notes, and calendar, and Deft lets AI agents work in it beside your people. People get real-time chat with spaces, direct messages, threads, mentions, reactions, files, and presence. Tasks open as Board, Table, Timeline, or Calendar views, with dependencies, subtasks, recurrence, and bulk actions. Notes, decisions, and channel memory become durable knowledge, with graph views and links back to the source conversation. Native calendar events sit beside read-only ICS subscriptions. Agent employees can join channels and receive task assignments. Tag the built-in assistant Defty to draft a task, answer a workspace question, or take a governed action, then review the proposal in an approval card before anything changes. Personal connections let Codex, Claude, ChatGPT, and other streamable HTTP MCP clients act as the signed-in user within revocable scopes. Approval tiers, trust levels, token scopes, revocation, activity history, and action receipts record who or what acted and what changed. OpenAI, Anthropic, OpenRouter, OpenAI-compatible endpoints, and local Ollama-style models are supported providers. Chat, tasks, notes, and calendars keep working with no AI key. Modules add company-specific records, relationships, and views, with a bundled Contacts module as the first example. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0-only licensed.

Nowen Note is a self-hosted knowledge base where your notes, tasks, daily journals, and mind maps live in one private workspace you control. One tree holds folders, rich-text documents, and Markdown notes side by side, with drag-and-drop ordering, unlimited nesting, colored tags, pinning, and full-text search across everything. Each note can switch between a rich-text editor and Markdown with live preview, split view, outlines, tables, code blocks, math formulas, diagrams, comments, and version history. Connect the AI provider you prefer, such as an OpenAI-compatible API, Gemini, DeepSeek, or local Ollama, to continue drafts, rewrite passages, translate, summarize, and ask questions answered from your own notes. Tasks get list, board, calendar, and timeline views with dependencies, recurring rules, reminders, and templates, while daily journals capture short entries, moods, and photos and roll them into AI weekly and monthly reviews. Teammates edit together in real time, and folder-level permissions, passwords, allow and deny rules, share links with expiry dates, and guest comments decide exactly who sees what. Imports arrive from Obsidian, SiYuan, Word documents, web pages, and plain Markdown, attachments can live on local disk or S3-compatible storage, and scheduled backups travel to email or WebDAV. Keep working offline with a cached workspace that syncs when you reconnect, clip pages from the browser extension, and connect other tools through the OpenAPI, SDK, webhooks, and MCP server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

LiftTrace is a self-hosted weightlifting tracker that keeps your entire training history, programs, personal records, and progress photos on your own server in a single Docker container. Log every set with weight, reps, RPE, warm-up markers, and supersets, or type a line like bench 3x5 at 225 and let the Smart Log parser turn plain text or a voice note into structured sets. Follow multi-week programs where each week prescribes its own sets, reps, tempo, rest, and load, and watch the diary prefill today's session from the active template. Browse an exercise library merged from wger, Free Exercise DB, and ExerciseDB, add custom movements, or bulk import your own catalog from a spreadsheet. Automatic PR detection, estimated one-rep maxes, volume and frequency charts, and dated progress photos with a drag-to-compare view show how training is trending. The built-in Trace AI coach reads your workouts, programs, records, and body stats to answer questions, log sessions, and adjust plans through Claude, OpenAI, Gemini, or a local Ollama model. Coaches can prescribe workouts, leave notes on individual sets, and review filmed set videos with comments stamped at the moment that matters, all with explicit consent from the athlete. Import years of history from Strong, Hevy, FitNotes, Jefit, or Garmin FIT files, keep logging offline in the gym, and sign in with OIDC through Authentik, Keycloak, or Authelia. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Inference Gateway puts a single OpenAI-compatible API endpoint in front of OpenAI, Anthropic, Groq, Cohere, Ollama, DeepSeek, Google, Mistral, MiniMax, Moonshot, Nvidia, and llama.cpp, so your application code never changes when you switch models or providers. The Go binary starts on port 8080 and normalizes authentication, streaming protocols, and response formats across all backends transparently. Native Model Context Protocol support auto-discovers tools from connected MCP servers and injects them into LLM requests without client-side management, enabling server-side tool execution across any provider that supports function calling. Agent-to-Agent protocol integration allows distributed agent communication through a declarative Agent Definition Language that generates production-ready Go or Rust servers from a single YAML manifest. The dedicated Kubernetes Operator manages Gateway, Agent, MCP, and Orchestrator custom resources with automatic HPA scaling, OIDC authentication, and service discovery that rebuilds MCP configurations when the discovered server set changes. Prometheus metrics and OpenTelemetry tracing provide full request-level observability across the entire inference pipeline. Middleware controls enable per-request provider selection, model routing, and fallback strategies. Official SDKs in Go, Python, TypeScript, and Rust provide typed client interfaces with streaming support. Docker Compose deployment requires only environment variables for API keys. A CNCF Sandbox applicant. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Foreign-language feeds are where good information usually goes to be ignored, and RSSBox fixes that by translating, filtering, and merging RSS sources, then republishing them as clean feeds your existing reader can subscribe to. Add a feed, pick a translation engine, and RSSBox republishes it with titles, full articles, or summaries translated, optionally showing both languages side by side. Each feed can use a different engine, from DeepL to any OpenAI-compatible model endpoint, and the admin shows translation status plus the tokens or characters each source has consumed. Update schedules are set per feed, so a fast-moving news source refreshes hourly while a quiet personal blog checks in once a day. Keyword filters quietly drop the recurring topics you never open, and AI filtering goes further by judging items against what you actually read. Tag several related sources and RSSBox merges them into a single unified feed, translations and filters applied, ready to follow as one stream. Full-text fetching pulls complete article bodies from feeds that only publish excerpts, so the translation covers the whole story rather than the teaser paragraph. Your reader app never changes: it simply subscribes to the translated feed URL like any other source. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Tunnel Panel manages GRE tunnels and port forwarding on Linux servers from a web panel that previews every change before it runs and verifies the result against the kernel. Create GRE, GRETAP, IP6GRE, and IP6GRETAP tunnels and see the exact commands, unit file, and rollback before anything is applied. The far end configures itself from a pairing code, as text or QR, with the sides flipped automatically so the two ends cannot disagree by a typo. Native ICMP probing with hysteresis keeps a single dropped packet from flapping a tunnel between down and back, and when ICMP is filtered the panel knocks over TCP and says so instead of crying wolf. Forward any TCP or UDP port, or a whole range, with round-robin, source-hash, or weighted balancing across destinations, and a backend that stops answering its health knock leaves the ruleset until it recovers. Watch every connection crossing the relay, who connected, which destination took them, and how much has moved, and set traffic limits per tunnel, rule, or destination. When something breaks, diagnostics reach a verdict with evidence and a suggested fix, backed by a streaming manual probe and a path-MTU search that offers to apply its findings. The panel reads your kernel's relay limits, recommends values from the host's memory and cores, and refuses changes that would lock you out of your own server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Cupdate keeps a watchful eye on every container image you run, reporting which ones are outdated or vulnerable while deliberately never touching the update button itself. Point it at a Kubernetes cluster, a Docker socket, or Podman hosts (local or remote, one or several) and it inventories every image in use with no configuration to write. Each image is matched against its registry to find the newest available version, and the dashboard shows the gap between what you deployed and what you could be running, with release notes inline so the decision to upgrade takes seconds instead of a changelog hunt. Vulnerability data is layered on top from four sources: Docker Scout for Docker Hub images, Clair for participating Quay images, GitHub Advisories for images tied to repositories, and osv.dev correlation for images shipping SBOMs. A dependency graph explains why each image exists in your stack by showing which workloads pull it, which ends the "can I delete this?" guessing game. Subscribe to the RSS feed to hear about new releases passively, query the REST API to drive scripts that update compose files or kustomizations, or surface outdated and vulnerable counts in a Homepage dashboard widget. Prometheus metrics and traces are available when you want the watcher itself watched. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

OpenSkyCam records a sky-facing IP camera around the clock on hardware you own, and searches the footage for meteors, planes, and anything else that moves. A small Linux relay by the camera copies the RTSP stream into one-minute MP4 files without re-encoding, kept on your disk under a rolling 40-day window: browse by day, scrub by hour, zoom into the 4K frame, download originals. Workshop workflows sample frames from any time window, run up to four detection or classification models over them, and sort each frame into buckets by class, score, count, time of day, or motion, once or nightly as footage lands. Detections of one object link across a recording into tracks labeled moving, stationary, or brief, so fixed stars and porch lights are discarded and aircraft kept. A trained night detector for planes and meteors ships with the project; every detection waits in a review view where you confirm or correct its label and box, then freeze the approved set as a versioned training dataset. The processor lives on your machine too (Apple or NVIDIA GPU, or plain CPU), and the footage itself never leaves your disk. Every website action is also a /v1 API call, and an MCP server lets an AI agent find last night's clearest meteors, take a photo at any second of stored video, or schedule the next workflow. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Garage UI is the web dashboard that Garage object storage never shipped, turning an admin API that speaks JSON over HTTP into screens your whole team can use. Create and configure buckets, browse objects with drag-and-drop uploads, and preview images, video, PDFs, and text inline instead of downloading files just to check what they are. A recursive search finds objects across a whole bucket, and bucket settings carry size and object-count quotas so one tenant cannot quietly eat the cluster. Access keys are created in the UI and assigned per-bucket permissions, replacing error-prone command-line key surgery. The cluster overview watches node status, layout configuration, and storage usage, so a degrading node shows up in the dashboard before it shows up as an outage. Sign-in flexes to your setup: no auth on a trusted network, basic admin credentials, the Garage admin token, or OIDC single sign-on through providers like Keycloak and Authentik. With OIDC teams enabled, access control maps token claims to bucket prefixes with named permission presets, and unmatched users are denied by default rather than promoted. Zero-config startup reads your existing garage.toml, so the first login takes minutes. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.