Emailed copies of the same document, each with a different filename and a different set of edits, are where collaborative writing goes to die. LibrePaper keeps one living document in the browser instead: start a project in HTML, Markdown, Typst, LaTeX, or Quarto, or upload an existing one, and the editor renders the compiled result beside the source as you type. Readers highlight the exact passage they mean and comment on it, suggested edits land as tracked changes, and threads resolve on the text in real time. Finished work publishes to its own separate host, so scripts and interactive figures inside a document can never reach a reader's sign-in session. Nobody manages another password: sign-in runs through GitHub, Google, Microsoft Entra ID, ORCID, or any OpenID Connect provider, per-provider lists decide who may publish and who may only comment, and anonymous comments can be switched on for outside reviewers. Every project exports as a complete, independent copy from the command line, which also administers the deployment and can serve a document's tools to an AI agent over MCP. Operators get graphs, account management, and moderation, with per-account storage quotas, upload limits, and retention rules keeping a public instance under control. Four Docker containers behind Caddy with automatic HTTPS, one configuration file, and nightly backups of database and files complete the deployment. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

One search is all it takes: type an album or track, press download, and Soulbeet turns the song you wanted into a tagged, filed library track inside Navidrome. It weighs the sources Soulseek offers through slskd, pulls the best one down, and hands the files to beets for tagging and organizing, with MusicBrainz matches scored in the open. When a match fails, the download stays put with its files intact, offering the candidates beets weighed, a paste-a-link MusicBrainz override, a retry, or an import-as-is using the file's own tags. Discovery keeps the shelves moving: connect Last.fm or ListenBrainz and the engine studies your listening to surface new tracks through track similarity, artist exploration, collaborative filtering, and genre exploration. Conservative, Balanced, and Adventurous profiles each keep their own Navidrome playlist, and a six-hour automation cycle refreshes picks, syncs ratings, prunes what expired, and regenerates the lists. Rating closes the loop in Navidrome: three stars or more promotes a track into the permanent library, one star deletes it, and unrated finds expire to make room. Households share the instance without sharing taste, because every user keeps private or shared folders, separate beets databases for duplicate detection, their own discovery profiles, and their own scrobble credentials. Light, medium, and full image tiers decide how deep tagging goes, adding AcoustID fingerprint matching, cover art, lyrics, and ReplayGain. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Anchor is a self-hosted note-taking app that keeps every note on your own server and on your devices, so your ideas stay searchable and editable even with no connection at all. Open the web app or the phone app and start typing; the rich text editor handles headings, checklists, highlights, and formatting from a slash menu, and everything saves locally first. When a connection comes back, changes sync automatically across your devices, so the thought you captured on a train is waiting on your desk. Organize with colored tags, pin the notes you live in, archive the ones you are done with, and set one-time or repeating reminders so a note resurfaces when it matters. Notes can carry image and audio attachments, custom backgrounds, and a full version history you can roll back. Share a note with another user as view-only or editable, search titles and body text across everything including the archive, and recover deleted notes from the trash during the recovery window. Bring an existing library with you through Markdown import, a full Anchor backup, or a Google Keep export, and take everything out again the same way. An admin panel controls registration and shows system statistics, and OpenID Connect sign-in through providers like Authelia or Keycloak can replace local passwords entirely. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Netronome is a self-hosted network monitoring platform that runs scheduled internet speed tests, watches packet loss and DNS resolvers, and reports bandwidth and health data from every server you point it at. Run tests against Speedtest.net, your own iperf3 servers, or public and custom LibreSpeed servers, choosing the exact endpoint from a list sorted with the nearest first. Put tests on a recurring schedule and read the history charts to catch an ISP that sags every evening or a connection that never delivers the speed on the invoice. Install the companion agent on each machine and watch live upload and download rates, traffic by hour, day, and month, processor and memory load, disk space, and temperatures in one place. Trace routes hop by hop, keep packet loss percentages in view, and confirm your DNS resolvers answer fast and return the records you expect. Set thresholds for download and upload speed, ping, packet loss, disk space, CPU, memory, and temperature, and route alerts to Discord, Telegram, Slack, email, ntfy, Gotify, Pushover, or a webhook. The server, the web interface, and the agent ship as one program, and agents connect over HTTP with an optional API key or inside a Tailscale network. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-2.0 licensed.

Open your laptop in a Lisbon cafe and your files at home answer as if the laptop never left the desk: AnywhereLAN stitches your own machines into one private mesh network with stable names like work-laptop.awl, no port forwarding and nothing exposed to internet scanners. There is no coordination server to trust. Peers announce themselves in the libp2p DHT, identify with ed25519 keys and connect directly over QUIC or TCP with TLS 1.3, hole-punching through NAT and borrowing a community relay only when both ends sit behind hostile firewalls. Send a browser out through the house connection with the built-in SOCKS5 proxy on 127.0.0.1:1066, handy on regional blocks and hostile hotel Wi-Fi. Prefer the full tunnel: the VPN gateway routes every IPv4 byte through a chosen peer, so the whole machine presents the exit node's address to the world. Devices join through invite links or QR codes. Every peer approves its friends and grants exit rights individually, and identity is a keypair you hold, so no account recovery email can betray the network. Manage it from the bundled web UI at admin.awl, script it from the awl CLI, watch it through Prometheus metrics on port 8639, and run it on Windows, macOS, Linux servers and Android phones. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MPL-2.0 licensed.

ExtendDB is a DynamoDB-compatible database server that answers the DynamoDB wire protocol from your own infrastructure, so applications written for DynamoDB run unchanged against a database you operate. Any AWS SDK, the AWS CLI, or DynamoDB tooling points at the ExtendDB endpoint and keeps working: tables, items, Query and Scan with key conditions and filters, batch reads and writes, and transactions all behave as the SDK expects. Streams feed change data to your own consumers, TTL expires items on schedule, vector indexes add cosine, Euclidean, and dot product search to on-demand tables, and point-in-time export and import move data in and out. Storage is pluggable, with PostgreSQL as the reference backend, SQLite embedded for small installs, and MongoDB and Cassandra for teams already running them. Every request is SigV4-signed and evaluated by a built-in IAM-style engine with users, groups, roles, policies, permission boundaries, and access keys, and TLS is mandatory on every connection. A web management console administers accounts and credentials, and a JSON metrics endpoint reports DynamoDB-style CloudWatch metric names and dimensions. The server runs as a daemon or in the foreground under Docker, Kubernetes, or systemd, healthchecks without extra tooling, and keeps serving in air-gapped environments with no internet connection at all. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Routr is a programmable SIP server that proxies, registers, and routes calls for carriers and communication platforms, replacing racks of inherited PBX plumbing with one cloud-ready process. Phones and trunks connect over UDP, TCP, TLS, WebSocket, or secure WebSocket, register against the built-in registrar, and find each other through the location service backed by memory, Redis, or Postgres. Routing is configurable per domain with intra-domain, ingress, egress, and peer-egress strategies, and multi-tenant domains carry their own access control lists. Load balancing with session affinity spreads calls across Asterisk and FreeSWITCH media servers, and RTPEngine middleware anchors media and adds SDES-SRTP toward TLS trunks. Web phones authenticate with JWT endpoint credentials, and every call message can be recorded and replayed for debugging. Operators manage the whole system through a gRPC API, the Node.js SDK, or the rctl command-line tool, and custom Processors and Middleware written in JavaScript reshape SIP messages as they pass. OpenTelemetry traces, metrics, and logs expose the server's behaviour in production, and the same deployment runs from a single Docker container to a Kubernetes cluster through the published Helm charts. There is no single point of failure in the design, so a registrar outage never takes the dial tone with it. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

At 3 a.m., your driveway camera is the only witness that matters, and LightNVR makes sure the footage lives on a drive in your house, not a subscription cloud. ONVIF discovery finds cameras on the network; an RTSP address adds the rest. Recording runs continuously, on a schedule, or only when something happens: draw a polygon over the gate, pick the object classes worth alerting on, set a confidence threshold, and clips keep a pre-event buffer so the lead-up survives too. Plate recognition turns passing traffic into a searchable log. Playback splits two ways. The live grid streams over WebRTC at sub-second latency, overlays detection boxes on the picture, and the Investigation workspace lines sixteen cameras onto one shared clock after an incident. Storage obeys retention policies, protected recordings stay put, and full disks archive out to S3, NFS or SAN volumes. Access comes with database users, roles, TOTP two-factor codes and API keys. Prometheus metrics report the recorder's own health, MQTT events feed Home Assistant, and a REST API carries detections into the rest of the house. The binary idles within 256 MB on supported boards and speaks nineteen languages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

OpenBoxes is an open-source warehouse management system that keeps medication and supplies visible from central depot to clinic cabinet, so staff always know what is in stock, where it sits, and when it expires. The product catalog holds medications, medical devices, office supplies, and fixed assets, with suppliers, manufacturers, pricing, classifications, and custom attributes on every item. Inventory is tracked by facility and bin location down to lot and expiration date, and every adjustment, transfer, and removal leaves a full transaction history. Reorder points and stock alerts flag low stock, overstock, and expiring items before they become emergencies. Inbound, purchase orders, invoices, and budget codes manage procurement; goods receipt captures lots and expiry dates, and suggested putaway directs stock to the right bins. Outbound, requisitions and stock lists drive requests from upstream facilities, FEFO picking pulls the earliest-expiring lots first, and packing produces packing lists with customs documentation. Cycle counting keeps records honest without closing the warehouse, and dashboards surface stock value, fast movers, and expiring stock. Barcode scanners and a mobile-friendly interface speed up receiving and counting on the floor, and spreadsheet imports load products, locations, and opening stock in bulk. A REST API and webhooks connect OpenBoxes to ERPs, DHIS2 health information systems, and integration platforms like n8n and OpenFn, and location-restricted roles keep each facility on its own shelves. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. EPL-1.0 licensed.

Rip a CD once, drop the files into a folder, and QM Music turns that folder into your household streaming service: phones, desktops and web players all browse the same library of MP3, FLAC, AAC and WAV files, organised by album, artist and genre from their ID3 tags and cover art. Because the server speaks the Subsonic API, Feishin, StreamMusic, Amperfy, Substreamer and Music Assistant sign in with an address and a login, no app-store rental required. Point a phone on hotel Wi-Fi at your home collection and it plays. At home, playback can pull pristine FLAC; on mobile data the transcoder serves an MP3 or AAC stream sized for the train ride. Keep a family happy in the background: each person gets an account with individual permissions, favourites that sync between devices in real time, private playlists and lyrics following the current track. Finding something new to hear takes recommendations from listening history, similar artists and similar songs, and two years of play history sit behind the statistics. Scheduled scans collect fresh rips automatically, refresh happens on demand when a disc lands, and the catalogue idles around 150 MB of memory on the server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Every device in a smart home speaks a different language, and ioBroker is the open-source home automation platform that translates Zigbee lamps, cloud-tied heating, and Modbus solar inverters into one system under your control. Adapters do the translating: more than 800 of them connect devices, protocols, and online services, from Philips Hue, Shelly, and HomeMatic hardware to MQTT, KNX, Telegram, and weather feeds. Everything an adapter learns lands in one shared structure of objects and live states, so a motion sensor from one brand can switch lights from another without either vendor knowing the other exists. Automations start simple: the rules editor clicks triggers, conditions, and actions together from lists, and the same logic grows into Blockly diagrams or full JavaScript and TypeScript scripts when a routine outgrows the form. Dashboards are yours to design in the vis-2 editor, where switches, sliders, gauges, and floor-plan views are dragged onto pages and bound to any data point in the tree. The whole installation is managed from the browser admin interface: install adapters, configure instances, browse the object tree, watch live states, read logs, and manage users without editing a single configuration file. Voice control joins through Alexa, Google Home, and Matter bridges, remote access works over VPN or the optional ioBroker.pro link, and because automations execute locally, the house keeps behaving when the internet drops. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Most family trees sit inside a single desktop file that only one relative can open, but GeneWeb publishes the whole tree on the web as an interactive site the entire family can browse and grow together. One lightweight server hosts as many genealogical databases as you like, and every page is generated on demand from the data itself, so edits appear instantly without rebuilding static files. Each person page gathers births, marriages, deaths, and other events with exact dates, witnesses, notes, and sources, giving every fact in the tree a documented trail back to its evidence. Trees arrive and leave in the standard GEDCOM format or in GeneWeb's own compact format, and details that do not fit the import land safely in notes instead of being discarded. The built-in relationship calculator traces the exact link between any two people in the database, even through billions of possible paths, and its consanguinity rates reveal how closely related spouses really were. Searching follows real research habits: names match across spelling variations, women are found by their maiden names, and nobility titles appear on a chronological timeline. Privacy comes built in through password accounts: friends can view private data, wizards can edit it, and visibility rules can hide everyone born within the last hundred years automatically. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-2.0 licensed.

A lobby television stuck on a printed poster, a cafe menu board nobody remembers to update, a corridor screen looping last month's notices: Xibo replaces that drift with one web dashboard where every display on the network gets designed content, a schedule, and fresh media from a central library. Layouts are composed on a canvas of regions holding video, images, text and live widgets, then sequenced into playlists and grouped into campaigns spanning hundreds of screens. Scheduling works down to dayparts and dates, so breakfast menus stop at eleven, event signage appears only on event days, and each group of displays keeps its own programming. Proof-of-play reports record exactly what aired on every screen for advertiser billing and compliance audits. Windows, Android, LG webOS and Samsung Tizen players check in automatically, pull changed content and report their status back to the CMS. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Conduit is a self-hosted backend platform that gives your application user accounts, databases, APIs, chat, and notifications out of the box, so you can skip months of boilerplate and ship the product itself. Define a data schema in the admin dashboard and Conduit generates CRUD and query endpoints for it automatically, backed by your choice of MongoDB or PostgreSQL. The Router module exposes every capability over REST, GraphQL, and WebSockets, and publishes Swagger documentation for each route as you build. Authentication covers a wide range of sign-in methods, and the Authorization module layers resource-level permission rules on top of every account. Realtime chat ships as a ready module with rooms and message history that clients join over WebSockets. Email and SMS modules send through multiple providers, and SMS doubles as a two-factor authentication channel that hardens sign-ins. File uploads land in the Storage module with several cloud providers supported, and PushNotifications keeps your mobile users informed. An Embeddings module adds text-to-vector generation and semantic search when you want AI features inside your app. Forms collect submissions and forward responses to an email address, covering contact pages and lead capture. A CLI bootstraps a working deployment in minutes, and production installs run on Docker Compose or Kubernetes. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

When a suspicious executable lands in your inbox, Freki gives your team a private place to pull it apart before it touches the network. Upload a sample through the web interface and Freki extracts its fingerprints at once: MD5, SHA-1, SHA-256, SHA-384, and SHA-512 hashes, plus CRC32 and SSDEEP fuzzy hashes for spotting near-duplicate variants. Static analysis then dissects Windows PE files without running them, reporting headers, sections, imported libraries, embedded strings, and capabilities identified in the code. A YARA engine sweeps every sample against your rule sets, so signatures your analysts write flag matching files the moment they arrive. Connect a VirusTotal API key and each report gains antivirus detection results from dozens of engines, placed next to your local findings. The same analysis runs through a REST API, so intake pipelines, mail gateways, and triage scripts can submit files and read verdicts automatically. Analysts discuss findings in community comments attached to each sample, building a shared memory of what a file is and why it matters. Accounts control who may submit samples and call the API, and every analyzed sample stays downloadable for re-examination or sharing with trusted peers. Docker Compose brings the whole platform up behind Nginx with its MariaDB database, keeping live malware samples on your own hardware instead of a public service. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Gramax keeps your documentation in a Git repository as plain Markdown, gives writers a visual editor that feels like a word processor, and publishes the result as a searchable website. Writers format pages with tabs, tables, code blocks, embedded videos, and diagrams drawn in Mermaid, Excalidraw, or Diagrams.net, plus Swagger descriptions that render live API references. Every change is a normal Git commit, so review happens in pull requests on GitHub, GitLab, Bitbucket, or Gitea, and the full history of every page stays auditable. Catalogs organize articles into a hierarchy for a product portal, an internal knowledge base, or project documentation, and styles can be customized to match your brand. Teams moving off older tools import existing pages from Confluence and Notion with formatting and hierarchy preserved. Documentation can be written in 17 languages, with parallel catalogs for each audience. The editor runs on Windows, Mac, and Linux or straight in the browser, always working on local files that open in any text editor. A built-in AI agent answers questions over your catalog and helps draft pages from inside the editor. On the server, the portal container pulls fresh content from your repository on an interval you set, so publishing a page is just merging a branch. Readers get a dedicated, customizable documentation website instead of raw repository files. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

One link replaces the scheduling dance: Thunderbird Appointment publishes your availability as a booking page where visitors choose a slot and the meeting lands on your calendar. You connect the calendars you already keep, Google Calendar or any CalDAV server, and the service reads your busy times and writes new bookings back as real events. Weekly schedules define the days and hours on offer, the length of each slot, and how far ahead or how last-minute a booking may be. Each booking page carries its own title, agenda, and location, from a street address to a Zoom link created for the meeting automatically. Visitors see open times in their own timezone, pick one, and leave their name and email; no account is required on their side. Requests can land as confirmed bookings right away or wait for your approval first, and every booking appears in your bookings list with attendee details. Your own calendar view gathers every connected calendar in one place, so personal and work commitments stop colliding. The interface speaks several languages, honors light and dark themes, and lets each user set the week start and 12 or 24 hour clocks. Self-hosters sign in with a password, and larger deployments can plug in an OIDC provider for single sign-on. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MPL-2.0 licensed.

A corner shop, a small cafe, or a minimarket can run its till on Lakasir, a point-of-sale system that keeps sales, stock, and the money owed in one tidy web panel. Cashiers process sales from the cashier menu, apply a discount to a single item or to the whole bill, and print receipts on a USB thermal printer straight from the browser. Products can carry a different price for each basic unit, so a carton, a pack, and a single piece of the same goods all ring up correctly. Purchasing records orders to suppliers, and barcode scanning speeds up receiving, stock counts, and checkout alike. Stock opname sessions walk the shelves with a scanner and reconcile counted quantities against the system, exposing shrinkage before it grows. Receivables track what customers owe the shop and what the shop owes others, with due amounts visible instead of buried in a notebook. Vouchers can be created, handed out, and tracked through redemption, and payment methods are defined by the owner rather than hard-coded. The real-time dashboard watches sales and performance as the day unfolds, and simple accounting rolls income, expenses, and profit into the same picture. Roles and permissions decide who may open the register, edit prices, or see the books. A companion mobile application puts the shop data in a pocket for checks away from the counter. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.