Your internal services deserve padlocks that browsers actually trust, and LocalCA is a small certificate authority you run yourself to issue them. From the web interface you create a self-signed root, install it once on your browsers and client devices, and then mint intermediate and leaf certificates underneath it for each service you host. Proxmox, Pi-hole, Jellyfin, Grafana, and the rest of a homelab stop showing insecure warnings and start presenting certificates your devices accept. The root can carry your own name, so the trust store shows your branding rather than a generic authority. Issued certificates also serve mutual TLS setups, where clients present certificates of their own before a service lets them in. Deployment stays deliberately small: a Docker Compose file brings the application up, ARM images cover Raspberry Pi class hardware, and a configurable time zone keeps expiry timestamps readable for your region. A reverse proxy path prefix is supported for placing the interface behind Traefik or Nginx at an address like /localca. Treat the instance as internal infrastructure, because issued private keys live in its database: keep it on a private network, change the default administrator password immediately, and restrict access to the host. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Chiyogami is a pastebin you host yourself for sharing code, logs, notes, and text snippets through short links that expire on your terms. Paste into the web editor and the content comes back formatted, with syntax highlighting for code and rendered Markdown for prose, so a stack trace or a runbook reads the way it was written. Anything sensitive can be encrypted in the browser before it leaves your machine, and the server never stores the password, which makes an encrypted paste safe to pass through chat or email. Every paste carries a configurable lifetime, from minutes to never, and visibility choices keep a snippet public, unlisted, or private behind an unguessable address. Registered users manage their own pastes from an account, and anonymous quick pastes stay available for one-off sharing. The public paste list supports search, so a team instance doubles as a small shared snippet library. Developers can skip the browser entirely: one curl command creates a paste from a file or a JSON body, and the API returns a short title that fetches the content later. Sharing extends to QR codes for moving text onto a phone, and built-in rate limiting throttles spam and abuse before it fills the database. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-3-Clause licensed.

A SIP phone system lives or dies on the unglamorous middle. Something has to route every call, know who is registered, wake phones that are asleep, and translate between networks that disagree. Flexisip is that middle, built as a modular server suite where you deploy only the pieces your service needs. The proxy routes calls and messages, relays media with ICE, STUN, and TURN support, and authenticates users by digest, TLS certificates, or OpenID Connect. Its push gateway speaks RFC 8599 to Apple and Google, so incoming calls ring phones whose app is closed, and it can lend that gift to an existing Asterisk or FreeSWITCH platform that lacks push of its own. The presence server tracks who is reachable and shares contact lists, the back-to-back user agent bridges SIP networks to PSTN gateways and trunks with codec transcoding and caller identity translation, and a registration event server notifies peer domains when users register. Instances cluster with load balancing for services that outgrow one box, the same suite shrinks onto a Raspberry Pi class intercom, and it has quietly powered the public linphone.org SIP service for over a decade. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Atsumeru is the bookshelf server for people whose manga and comic collection lives in CBZ files scattered across drives: point it at the folders and it becomes a tidy library you can read from anywhere. Series organize themselves into auto categories, custom categories, and metacategories, and metadata edits are painless, with automatic import from ComicInfo.xml and book_info.json files and parsing from supported catalogs when you want richer records. Reading happens in native apps for Windows, Linux, Mac, and Android, or in the built-in WebUI, and two-way history synchronization keeps your place when you move from desk to phone. Whole series download inside supported apps for offline reading, which turns a commute into a chapter backlog clearing session. Multiple users get separate histories and powerful access controls, so a household shares one server without sharing reading progress or seeing each other's shelves. A documented REST API with Swagger on board covers automation and custom clients. The server runs as a single jar or a Docker container on port 31337, small enough for the spare machine already holding the files. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Every screenshot, GIF, short video, audio clip, and block of text you share can live at a clean link on your own server, with the URL itself acting as the editing tool. Upload an image once and ask for any size, crop, or filter by changing the address, with WebP conversion handled automatically for browsers that support it and GIFs convertible to MP4 for quieter sharing. Photos arrive stripped of EXIF data, so phone pictures stop broadcasting GPS coordinates and camera models to everyone you share with. Uploading the same file twice costs no extra space, and delete codes at individual or global level keep takedown control with you rather than a platform. Several uploads combine into an immutable album with a single gallery link, a "My Uploads" tab in the browser tracks what you sent for later copying, deleting, or bundling, and playful extras generate identicons and placeholder images straight from URL patterns. Text bins, Markdown rendering, a URL shortener, and an upload API for scripts round out a tool that replaces the screenshot-upload step of a dozen workflows. External storage, optionally encrypted, takes over when the local disk outgrows the habit. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Drop Directory Lister into a folder and that folder becomes a tidy public file library. Visitors browse directories in the browser, search filenames, sort the listing the way they think, and download single files or the whole directory as one zip. There is nothing to configure for the first run, which makes it the fastest honest answer to "how do I just share these files" for release archives, documentation bundles, media collections, and project downloads. A README placed in a folder renders right on the listing page, so instructions travel with the files instead of living in a separate post nobody opens. File hashes appear beside downloads for people who verify what they fetched, and light and dark themes keep the listing presentable on a project site or a personal server. Multiple languages localize the interface for the audience actually downloading. Point it at the folder, share the link, and the files present themselves. One caution belongs in the pitch itself: everything in the exposed folder is public, hidden files included, so this is a publishing tool, never a place for private material. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Your task list should outlive the app that displays it: Tasks.md turns a folder of plain Markdown files into a kanban board, so the board is a view of your notes rather than a database holding them hostage. Every lane you create becomes a directory and every card a Markdown file inside it, which means the whole board stays readable in any text editor, greppable from a terminal, and friendly to the note tools you already use. You write card bodies in a proper Markdown editor, organize work with tags and due dates, and drag cards between lanes as priorities change. Sub-folders open as their own projects with separate lanes, so one installation quietly serves a work board, a home board, and a writing board side by side. Light and dark themes follow your operating system, three bundled color schemes (Adwaita, Nord, and Catppuccin) set the mood, and a custom stylesheet hook recolors everything else. The board installs as a PWA for an app-like window, speaks multiple languages detected from the browser, and slots under a subpath reverse proxy when it shares a domain. One Docker container on port 8080 serves the whole thing. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Peergos is a peer-to-peer encrypted drive, messenger, email client, and private social network where your files and friendships stay unreadable to the server that stores them. You browse, upload, and organize files in a familiar web drive, then share a folder with a friend or send anyone a secret link whose key never travels to the server, so the link itself cannot leak what it opens. The built-in messenger handles private conversations, an encrypted email client with a bridge reaches the outside mail world, and the social feed shows posts only to the people you chose, with even the friend graph hidden from the operator. Web apps run from Peergos inside a sandbox and see only the data you grant them, which turns the drive into a private place to run tools rather than a folder other services reach into. Because encryption happens on your machine before anything is stored, a compromised server yields ciphertext and no file names, sizes, or sharing relationships. Host it at home and the same account gives your household storage plus its own communication platform; log in from any browser without carrying keys, because your password rebuilds them. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Running chat for a dozen people is easy; running it for a city-sized crowd, on servers you control, with group rooms, archived history, and phones that still buzz when the app is closed, is the job MongooseIM was built for. MongooseIM is an XMPP server at the core of a messaging platform, so any standard XMPP client on desktop, mobile, or web can connect, and browser clients reach it over WebSockets or BOSH. Group conversations run in multi-user chat rooms, message archive management keeps searchable history on the server, and message carbons deliver real-time copies to every signed-in device a person owns. Offline messages wait for reconnecting clients, rosters carry contact lists and presence, and privacy settings plus vCard profiles round out the everyday chat features. Operators manage users, rosters, messages, and settings through a GraphQL API over HTTP or the mongooseimctl command line, and more than fifty built-in metrics show what is happening inside each node. Accounts authenticate against internal storage, MySQL, PostgreSQL, Cassandra, LDAP, or external scripts, and multi-tenancy support creates thousands of chat domains dynamically on one deployment. Adding cluster nodes raises capacity as the audience grows, and the companion push component wakes mobile apps through push notifications. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-2.0 licensed.

OSRM computes the fastest route between any two points, the travel time between every pair of stops, and the road a noisy GPS trace really followed, all from OpenStreetMap data on your own server. Feed it a map extract for your city or the whole planet, preprocess it with the car, bicycle, or foot profile, and the HTTP API starts answering. The route service returns turn-ready paths with distances, durations, and geometry between any coordinates. The table service computes the full duration or distance matrix between all pairs of points, which is the raw material for dispatching, territory planning, and pickup optimization. Map matching snaps noisy GPS traces onto the road network in the most plausible way, cleaning fleet and fitness data into actual driven streets. The trip service orders a set of stops into an efficient round trip, and the nearest service snaps raw coordinates to the closest road segments. A tile service exposes routing metadata as vector tiles for debugging and visualization, and a public demo frontend shows routes on a live map. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-2-Clause licensed.

Open a browser tab and you are at a real login prompt on your server. Wetty puts a full terminal inside the web page, so SSH access survives firewalls, borrowed laptops, and networks where only HTTPS gets out. The emulator is a complete xterm.js implementation rather than a crippled web console, so colors, Unicode, mouse interaction, and full-screen programs like vim, top, and tmux behave the way they do in a desktop terminal. Websockets carry the session instead of Ajax polling, which keeps keystrokes responsive enough to forget you are in a browser. Point it at any SSH server with host, port, user, and key options, or let it launch the local login prompt when it runs on the machine itself. Visiting /ssh/yourname skips the username question and goes straight to the password prompt for that account. Serve it over HTTPS with your own certificates, restrict which browser origins may connect, run it on a Unix socket behind a reverse proxy, and confine it to a base path when it shares a domain with other tools. A YAML configuration file and environment friendly flags make the same setup reproducible across a fleet, and an official container image keeps installation to one command. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Transfer.sh is a file sharing service you host yourself, where sending a file to anyone is one curl command and receiving it is one link. Upload from the terminal with a plain PUT request or drop files into the web front end, then share the returned address with teammates, clients, or your future self on another machine. Every upload can carry its own expiry rules: cap the number of downloads, set the number of days before deletion, and let the automatic purge clean up what nobody needs anymore. A private delete link travels back with each upload, so the sender can pull a file down early without asking an administrator. Passwords can encrypt content on the server with AES256 before storage, and command line users can encrypt locally with GPG before anything leaves their machine. Uploads can be scanned through VirusTotal or a local ClamAV daemon before they are shared, which suits support desks trading log bundles and installers with people outside the company. Storage is your choice: a folder on the server disk, an S3 bucket including MinIO and other S3 compatible stores, Google Drive, or Storj, picked by configuration rather than code changes. Basic authentication, rate limiting, and automatic HTTPS through Let's Encrypt round out a service that runs as one small container on port 8080. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Small businesses file every invoice, contract, and letter by what it is instead of by folder with SimpleDMS, a document management system built around types, tags, and searchable metadata. Upload a document to the inbox, pick its type, and the sidebar offers exactly the tags and fields that type needs, so an incoming invoice asks for the issuing company and receipt date instead of a blank properties page. Name-giving attributes label each file automatically from its own metadata, and the Browse view finds it again by company, date, or approver in seconds. Spaces act as workspaces with their own document types, tags, and permissions, so the team shares project files in one space, exchanges papers with an accountant or customers in another, and keeps private records apart. Tag groups such as companies and employees stay consistent across thousands of documents, date and text fields capture the facts you search by later, and values can be corrected at any time when a document was filed in haste. Dark mode is built in, the interface runs comfortably on a tablet at the scanner, and no analytics or tracking watch how your office works. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

TileServer GL turns map data files on your server into the styled map tiles that websites and mobile apps expect, so your maps stop depending on a commercial tile provider and its usage bill. Feed it an MBTiles or PMTiles file, for example an OpenMapTiles extract of a city, a country, or the whole planet, and it serves vector tiles straight from the file to MapLibre GL JS, mobile SDKs, Leaflet, and OpenLayers clients. The full version renders raster tiles on the server side too, producing PNG, JPEG, and WebP images at standard or retina resolutions for clients that cannot draw vector maps. Cartography stays in your hands through GL styles: the server hosts the style JSON, sprites, and font glyphs, and every layer color, label, and road casing can be restyled and republished without touching the underlying data. GIS tools connect through WMTS capabilities documents, and TileJSON endpoints describe every served dataset for automatic client configuration. Static image endpoints answer with finished map pictures for reports, thumbnails, and emails, centered on coordinates or fitted to an area, with route lines and markers drawn onto the image on request. A built-in browser viewer lists your styles and data sources for a quick look at what is being served, terrain datasets can answer elevation queries by coordinate, and a health endpoint reports when the server is ready. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-2-Clause licensed.

Development teams hand their outgoing webhooks to Svix, which delivers each event to customer endpoints with retries, signed payloads, and a delivery record for every attempt. Your app makes one API call when something happens, a user signs up, an invoice is paid, a build finishes, and Svix delivers the event to every subscribed endpoint your customers registered. Endpoints that fail get automatic retries on a schedule, deliveries are logged attempt by attempt, and failed messages can be resent instead of vanishing. Customers organize their integrations as applications, subscribe endpoints to the event types they care about, filter by channels, and verify signed payloads so forged requests get rejected. You define the event catalog once, and fanout, throttling, and endpoint bookkeeping stop being code you maintain. Official libraries for nine languages and a CLI make the first integration an afternoon task, and the whole service runs from a Docker Compose stack with Postgres and Redis when you want it on your own infrastructure. Your product gains the webhook system customers expect, without your team becoming a deliverability department. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

With Snapcast, the music follows you from kitchen to study without a stumble, because every speaker in the house plays the same audio at the same instant. The server grabs sound from your player, a Spotify Connect endpoint, an AirPlay receiver, a turntable line-in, or a network stream, then feeds it to small clients around the house. Each client keeps its clock married to the server time and trims single samples to correct drift, holding sync tight enough that echoes between rooms simply do not happen. Group clients so the downstairs plays the record collection and the office plays a radio stream, switch a room from one source to another from your phone or browser, and set each room volume independently. Clients run on Raspberry Pis, old laptops, Android phones, ESP32 boards, and the server itself, so spare hardware becomes speakers instead of e-waste. Pair it with MPD or Mopidy for a library, librespot for Spotify, or shairport-sync for AirPlay, and choose PCM, FLAC, Vorbis, or Opus per stream to balance fidelity and bandwidth. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

IRC never died, it just waited for a server that behaves like people chat now: Ergo runs your own IRC network where nobody loses the thread when a laptop closes. The server remembers channel and direct message history and replays what you missed when you reconnect, and your nickname stays present around the clock like a bouncer, so conversations keep their context. Connect your phone, desktop, and terminal clients to the same nickname at once and each one stays in sync. NickServ accounts, ChanServ channel registration, and HostServ vanity hosts are built in rather than bolted on, and SASL, client certificates, and bcrypt hashed passwords keep sign-in sane. Modern IRCv3 capabilities power typing notifications, message replies, and rich history requests for clients that support them, and UTF-8 nicknames and channel names work when you want them. Operators get a unified ban system, connection limits, IP cloaking, LDAP integration, and a YAML configuration that reloads live with a rehash, certificates included. One small binary or container is the whole network, equally at home for a friend group, an open source project, or a company that still loves plain text chat. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

dpaste is a self-hosted pastebin that turns code snippets, log excerpts, and config files into short highlighted links with expiry and access rules you control. Paste code, stack traces, or plain notes, pick the language, and highlighting makes the result readable at a glance in the browser. Set the paste to expire in an hour, a week, a month, or never, or make it a one-time snippet that deletes itself after it has been viewed. Every paste offers a raw view for clean copying and terminal friendly reading, and random short slugs keep links tidy in tickets and commit messages. Scripts post through the API with a single request, so deploy tooling and CI jobs can publish their output where humans can read it. Run it standalone for the team, or fold it into an existing Django project as an app, and tune slug length, default language, maximum size, and expiry choices to your habits. Nobody has to wonder which public paste site a sensitive debug log landed on, because the bin answering the link is yours. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.