OneTimeSecret turns a password or private note into a single-use link that destroys itself the moment the recipient opens it. Create a secret in seconds from the web form: paste the text, optionally lock it behind a passphrase, and pick how long the link stays alive, from minutes to days. Send the generated link by email straight from the app, or drop it into any chat or ticket where a credential needs to change hands. Because the link burns after one view, a forwarded message or an old thread search cannot leak what was shared; once the recipient reads it, the content is gone for good. An API issues secrets programmatically, so scripts can hand database passwords or access tokens to teammates without writing them into CI logs or shell histories. Use it anonymously for quick one-off shares, or switch on full authentication with accounts, multi-factor authentication, and WebAuthn keys for a controlled internal service. Custom domains let the links carry your own hostname, so recipients see a service your organization operates rather than a public website. Admins manage users, domains, and access from a built-in console suited to teams that hand over credentials every day. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Forgotten habits cost your avatar health in Habitica, a self-hosted tracker that turns habits, dailies, and to-dos into a role-playing game with levels, gold, and loot. Three task types structure the day: Habits reward or punish repeated behavior, Dailies repeat on daily, weekly, or monthly schedules with streak counters, and To-Dos carry deadlines, checklists, and difficulty levels. Completed tasks pay out experience, gold, mana, and drops; levels unlock Warrior, Mage, Rogue, or Healer classes with skills that buff the party, heal damage, or convert streaks into rewards. Gold buys weapons, armor, and potions from your own rewards list, and random drops hatch into collectible pets that grow into mounts as you feed them. Parties of up to thirty members take on quest scrolls; every finished daily strikes the boss, every missed one wounds the whole party, so progress depends on showing up. Guilds gather around shared interests with chat and challenges, shared task lists you subscribe to and adapt, and seasonal events rotate limited gear and quests through the year. Avatar customization spans inclusive hairstyles, skin tones, and wheelchairs, reminders and widgets keep today's dailies visible, and light and dark themes sync across web and mobile. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPLv3 licensed.

Signature PDF turns the print, sign, scan, email routine into a browser tab: upload a contract, place your signature on the page, and send the finished document back without paper ever entering the loop. Sign alone in seconds, or share a link and let partners, clients, and colleagues add their signatures to the same document in turn. Draw your signature with the mouse or trackpad, type it in a handwriting style, or stamp a scanned image of your handwriting onto any page. Drop the signature exactly where it belongs, resize it, and apply it across selected pages before downloading the signed file. Organize mode lays every page out as thumbnails you can reorder, rotate, delete, extract, and merge with pages from other PDFs. The metadata editor rewrites title, author, and custom fields, and compression shrinks bulky scans to a size email can carry. For shared signing, PDFs rest on the server only for the retention window you choose, and optional storage encryption keeps their contents unreadable to anyone missing the key. Where cryptographic proof is required, certificate-backed digital signing proves who signed and exposes any later edit to the file. A built-in demo document lets anyone test the full flow first, and the translated interface serves signers in many languages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Bludit is a flat-file content management system that runs your website or blog from plain JSON files, giving you a complete admin panel and publishing workflow with no database anywhere in the stack. Writing feels familiar whichever way you work: draft posts and pages in the Markdown editor, switch to the WYSIWYG editor when you want to see the page as you build it, or drop into HTML for exact control. Cover images, galleries, and uploads live in the media manager, and categories and tags keep a growing archive browsable. Built-in SEO tools handle titles, meta descriptions, and friendly URLs, so pages come out ready for search engines and social previews without another plugin hunt. When the look needs to change, the official theme directory restyles the whole site from the admin area, and the plugin directory adds galleries, contact forms, and analytics the same way. Moving day is a copy command: the entire site, content and settings included, is a folder of files you can duplicate, back up, or carry to another server. Because every page renders from files with no database round trips, modest hardware serves pages quickly. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Every email account you own lands in one combined inbox with Cypht, putting Gmail, Outlook, a work Exchange server, and your RSS feeds behind a single login. Combined views do the heavy lifting: one inbox, one unread list, one sent folder, and one flagged list span every connected account, and each account still keeps its own folder tree when you need to work inside a single mailbox. Messages move freely once they are together: search across all accounts at once, then copy or move mail between accounts, flag favorites, and clear out large mailboxes from the same list. Sending identity stays organized through profiles, which pair an incoming account with an outgoing SMTP server and attach a signature and reply-to address, so the right name and footer go out with every message. New accounts connect over IMAP, JMAP, or Exchange Web Services, and provider auto-discovery fills in server settings for major services instead of making you look up ports. Everything is a module set, so LDAP authentication, folder sharing, and integrations like WordPress and GitHub can be switched on or left out entirely. Pages stay small and quick on modest connections, which suits the ISPs, schools, and small teams Cypht was built for. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. LGPL-2.1 licensed.

Ferron is a web server and reverse proxy that serves your sites and applications with automatic HTTPS, a configuration file you can read at a glance, and logs that explain exactly why a request failed. Declare a hostname with a root directive and it serves files from disk; swap in a proxy directive and the same block forwards traffic to your application on localhost, with PHP handled through one fcgi_php line to PHP-FPM. Every public hostname receives a TLS certificate automatically, issued and renewed without certificate paths or renewal scripts in your config. The differentiator is debugging: each request carries a trace ID printed in the access log, repeated in the error log lines it generates, and returned to the client inside JSON error responses, so one grep reconstructs the whole failure. The ferron doctor command validates a configuration before you reload it, pointing at the file, line, and column of each mistake and flagging violations like an overexposed directory listing. Its admin API answers /config and /status queries with live running state, and metrics and traces flow to Grafana or any OpenTelemetry collector through OTLP. Reverse proxying spreads requests across backend upstreams with health awareness and circuit breaker events you can watch live. HTTP/2 and HTTP/3 are on by default, and there are no worker counts or pool sizes waiting to be tuned. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Web and mobile applications get a ready-made backend from Kinto: create buckets and collections through a REST API, save records as plain JSON, and every signed-in device reads the same data without any custom server code. Permissions attach to individual buckets, collections, and records, so you can keep a shared dataset public, limit a collection to a signed-in group, or hand a teammate write access to exactly one collection. Groups bundle people and carry permissions as a unit, which keeps multi-user applications tidy as rosters change. Synchronisation is the headline act: each object carries an incrementing revision number, clients poll for changes since a revision they already hold, and the JavaScript client stores data in IndexedDB so applications keep working offline and publish updates when the connection returns. Collections can declare a JSON schema, and the server rejects records that do not match, which stops malformed writes at the door. The history plugin records every change with its author, an audit trail you can query or roll back from. Records can carry file attachments, and the Kinto Admin web console renders buckets, collections, and records in a browser so you can inspect data, edit entries, and repair permissions without curl. Mozilla runs this model to deliver Firefox configuration and blocklists, and your VPS instance speaks the identical API. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Judge0 is a code execution service that takes source code over a simple HTTP API, compiles and runs it inside a locked-down sandbox, and hands back exactly what the program printed, how long it took, and how much memory it used. Send a snippet in any of more than 90 languages, from Python, JavaScript, Rust, and Go to C, Java, and Haskell, and pick the compiler or interpreter variant you need. Each run accepts standard input, command-line arguments, and custom compiler flags, then reports standard output, errors, and a precise verdict covering accepted, wrong answer, time limit, compilation error, or runtime failure. Per-submission controls cap CPU time, memory, stack size, and output file size, so a fork bomb or an infinite loop dies inside its fence instead of disturbing the host. Submissions run one at a time or in batches, and a synchronous mode answers in the same request for snippets that finish fast. Webhooks call your application the moment a long job completes, which keeps polling loops out of worker queues and classrooms alike. Coding platforms grade student work with it, hiring tools run candidate solutions against hidden tests, and AI agents execute the code they generate before trusting it. Official Python and JavaScript SDKs wrap the raw requests, so most integrations shrink to choosing a language and reading the result fields. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Private machines hide their services behind routers and firewalls; sish gives those services a public address, reached with nothing more exotic than the SSH client already on your laptop. Point a standard remote forward at the server and a local web app appears at its own subdomain over HTTPS, ready to share with testers, clients, or a webhook provider. Raw TCP forwards work the same way, publishing a database, a game server, or an SSH port on a fixed external port you choose. Private aliases keep sensitive services off the public internet entirely, reachable only through an authenticated SSH jump from another machine you control. SNI routing passes encrypted TLS connections to the right backend by hostname, so several services share one public endpoint without the tunnel terminating their encryption. Aliases can spread traffic across multiple backends with built-in load balancing modes, handy when several replicas sit behind one name. The service console lists live tunnels and inspects forwarded requests as they pass, turning tunnel debugging into reading a log instead of guessing. Access rests on SSH keys or passwords with hot-reloaded key directories, and binding policies cap which subdomains and ports each user may claim. Because clients need no agent software, locked-down laptops, CI runners, and embedded devices can open tunnels with the tools already installed. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

MiroTalk P2P gives your team browser meeting rooms with video, screen sharing, and chat, where the media travels directly between participants instead of through a rented cloud. Create a room, send the link, and guests join from any modern browser with nothing to install and no account to create. Calls carry video at high frame rates, and anyone can share a full screen, one window, or a browser tab to walk through documents and slides. The built-in recording captures screen, camera, and audio in the browser, ready to download and pass along after the meeting. Chat supports Markdown formatting and emoji, and the room also packs a collaborative whiteboard, a shared text editor, live polls, and breakout rooms. Files move between participants inside the call, and speech recognition plus voice commands keep hands free during long sessions. Hosts lock rooms with passwords, hold arrivals in a lobby, and require approval before strangers wander in. Sign-in through OIDC, per-room JWT credentials, and host protection controls keep recurring meetings behind your own identity provider. A full REST API creates rooms from your own tools, Slack and Mattermost commands start calls from chat, and an iframe embed drops meetings into existing pages. The interface speaks 133 languages, and an optional ChatGPT assistant joins rooms to answer questions in the conversation. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Seerr runs the front desk for your media server: friends and family discover movies and shows, request what is missing, and you approve or decline without a group chat full of titles. It unifies the Overseerr and Jellyseerr projects into one application that works with Jellyfin, Plex, and Emby alike. The discovery home page surfaces trending, popular, and upcoming titles with rich artwork, cast information, and trailers, so browsing feels like a streaming service rather than a file list. Requests can cover a whole series or individual seasons, with separate handling for 4K content when your library keeps two quality tiers. Approved requests hand off to Sonarr and Radarr automatically, and requesters watch the status move from pending to processing to available. Users sign in with their media server accounts, and administrators import those users, set per-user request quotas and permissions, and review everything from a request management screen designed for quick approvals. Watchlists and blocklists sync with your server, notification agents announce new requests and approvals through Discord, Telegram, email, and push services, and the mobile-friendly interface keeps approvals possible from the couch. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Build in-app product tours, checklists, surveys, and banners with a visual builder, then show them to the right users inside your own product: that is Usertour, an open-source onboarding platform you host on your own infrastructure. Point the builder at any element on the page and it anchors steps, tooltips, and modals to your live interface, styled with themes and custom CSS so the flow looks native instead of bolted on. New users get a getting-started checklist with a progress bar; returning users meet a launcher or banner announcing the feature they have not tried; a survey asks the rest what blocked them. Targeting rules decide who sees each flow based on user attributes and behavior, so trial accounts, paying teams, and admins stop getting the same tour. Analytics report views, unique viewers, completion rate, and the exact step where people drop off, turning onboarding into something you iterate on with evidence. Everything runs from a JavaScript SDK in your app and a builder your product team can operate without filing engineering tickets. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

PicoShare is a minimalist file-sharing service you host yourself: upload any file and get a direct download link that anyone can open, with no ads, no signups, and no size or format restrictions. Send a client a 4 GB video or a raw photo archive and they download the exact bytes you uploaded, because PicoShare never resizes or re-encodes media while sharing. Every upload can carry an expiration, from a day to never, and an optional private note that only you can see. When other people need to send files to you, create a guest link instead of asking for email attachments: guests upload through the link with no account, and you set the maximum file size, the total number of uploads, and an expiry date for each link. The files list shows everything you have shared with sizes, upload dates, and expirations, and every entry offers one-click link copying and deletion. A single shared secret guards the admin side, and all data lives in one SQLite database file that you can back up or replicate to cloud storage automatically. Run it as one small Docker container on your own domain and your download links stay yours. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Bencher keeps a continuous record of your benchmark results and flags performance regressions in its web console before they merge into your main branch. Keep the benchmarks you already have: the bencher CLI runs your harness, collects its output through adapters for tools including Criterion, Iai, pytest-benchmark, Go benchmarks, and hyperfine, and ships the numbers to your server. Run the same command on your laptop and in CI, so a pull request compares against a baseline built by the same measurement pipeline instead of a fresh guess. The console plots every benchmark across branches, testbeds, and measures, turning months of runs into lines you can read at a glance. Set thresholds on any measure and Bencher applies statistical tests to separate a genuine slowdown from ordinary machine noise. When a result crosses a threshold, an alert fires and the CI run can fail, so the regression conversation happens on the pull request rather than in production. History stays queryable through the API and console, so you can pin down when a specific function got slower and which change did it. Self-host the Console and API servers with Docker next to the code they measure, and keep every result on machines you control. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 or MIT licensed.

FileGator is a self-hosted, multi-user web file manager that gives your team a shared place to upload, organize, preview, and download files through the browser, with every person fenced into the folders they are allowed to touch. Create accounts for colleagues, students, or clients and give each one a home folder plus permissions that decide what they can read, write, rename, or delete. Everyone gets the full file toolkit: copy, move, rename, edit, create, delete, and preview, plus zip and unzip for bundling archives on the server. Select several files or folders and download them together, or zip a remote directory and pull it down in a single transfer. Uploads accept drag and drop with a live progress bar, and chunked transfers pause and resume, so a multi-gigabyte video survives an unstable connection. Point FileGator at a plain folder on the server disk or connect an Amazon S3 bucket as the storage adapter behind the same interface. Teachers collect assignments through it, field teams drop photos and documents from the road, and families share one photo archive without anyone installing an FTP client. Admins manage users, roles, and permissions from one panel, and the application runs on ordinary PHP hosting you already know how to operate. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Kapowarr tracks the comic series you collect, hunts down missing issues, and files every download into a tidy, consistently named library on its own. Add a volume and Kapowarr pulls cover art, publisher details, and issue lists from ComicVine, then maps the series to a folder in your library. Run Search Monitored to grab a whole run in one click, or open Manual Search and pick exactly which release of an issue lands on disk. Downloads arrive through GetComics direct links on hosts including Mega, MediaFire, and Pixeldrain, and a configured torrent client covers releases that only circulate as torrents. The moment a download finishes, the issue is renamed to the format you defined and moved into the correct volume folder. Point Kapowarr at an existing collection and the import workflow matches folders against ComicVine, shows every match for your review, and only then starts renaming or moving files. Convert issues between archive formats, rename or move entire volumes in bulk, and clean up a messy library from the same screens. A link blocklist remembers dead download pages and blocks sources that stop working, so repeat searches skip the junk and go straight to links that deliver. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

imagor is a self-hosted image server that turns one master photo into every size, crop, and format your site needs, generated on demand from a single URL. You describe the transformation in the address itself: a width and height, a smart crop, then a chain of filters for fill color, format, quality, and watermark. Requests stream through a pipeline built for parallel throughput, so a thumbnail costs milliseconds even when traffic peaks, and the same syntax your team may already know from thumbor works unchanged. Smart cropping keeps the important part of the frame, focal points pin the exact region that must survive, and detection plugins can blur faces automatically for privacy-sensitive publishing. Forty-plus filters cover the daily work of a media pipeline: text overlays with real fonts, image compositing with blend modes, rounded corners, redaction, sharpening, and per-channel color control. Output lands in modern formats including WebP, AVIF, and JPEG XL, with automatic format negotiation and a byte budget that squeezes quality until a file fits your limit. Processed results cache to filesystem, S3, or Google Cloud storage, signed URLs keep strangers from minting their own transformations, and a metadata endpoint returns BlurHash placeholders and average colors for lazy-loading galleries. A companion service adds video thumbnails, and an MCP template layer composes OG cards and product grids. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

ZeroClaw puts one personal AI agent on every messaging app you already use, answering from your own server with your own model keys. A single instance binds Discord, Telegram, Matrix, Slack, WhatsApp, Signal, email, and webhooks at once, so you can start a conversation on your phone and finish it at your desk without losing context. You choose the brain behind it: Anthropic, OpenAI, a local Ollama model, or any OpenAI-compatible endpoint, with fallback chains that keep the agent answering when one provider has a bad day. The agent acts through tools that run shell commands, drive a browser, call HTTP APIs, and talk to custom MCP servers you plug in. A web dashboard gives you chat, a memory browser, a configuration editor, cron job management, and a tool inspector from any browser. Long-term memory lives in SQLite on your disk with embedding-based recall, so past conversations stay searchable and private. Supervised autonomy is the default posture: medium-risk actions pause for your approval, high-risk actions are blocked outright, and operating system sandboxes plus cryptographic receipts keep every tool call bounded and auditable. Event-driven standard operating procedures react to MQTT messages, webhooks, schedules, and hardware events, and named agents let different personalities guard different channels. Registered as a system service, it stays online around the clock. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT or Apache-2.0 licensed.