Most AI agents are a chat box with confidence; Antares is a working security specialist that shows its evidence. Point it at a target you are authorized to test and its specialist agents map the surface, test web applications against OWASP, probe APIs, and record every confirmed finding with its reproduction steps. When the run ends, the findings are already compiled into a report, because the agent kept the evidence as it went instead of reconstructing it afterward. The same workspace handles ordinary work between engagements: it reads and writes files, runs your shell, drives a real browser, searches the web, and retrieves from a built-in memory and RAG index that remembers what matters across sessions. Give it a goal and it holds to that goal across turns, schedules its own follow-up work, and answers from Telegram and Discord when you are away from the dashboard. Bring your own models, since everything runs on your machine or server from one binary, with the dashboard, terminal UI, and API served by a single process. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

OmniSight ends the homelab ritual of a dozen admin panels open in a dozen tabs, each with its own login and its own idea of what healthy looks like. It folds all of them into one page that answers the only question you actually have: is everything fine? Watch Proxmox nodes with their VMs, containers, backup status, and Ceph health next to VMware hosts and datastores, Linux and Windows servers, and Kubernetes pods with live log viewing. Add Docker hosts and see container status, ports, resource use, and image updates, check OPNsense firewalls, TrueNAS and QNAP storage, and PostgreSQL, MySQL, and MongoDB databases without leaving the dashboard. A small push agent installs with one copied command and self-registers within seconds, needing no inbound firewall rules, so machines behind NAT report in on their own. Follow relationships on the topology map, restart a service from the detail view, export a full backup, and publish a read-only public status page for anyone who asks how things are running. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-2.0 licensed.

SpatiumDDI is the open alternative to commercial DDI platforms that charge by the IP, by the appliance, and by the feature, then lock every zone and subnet you own inside a renewal cycle. It does not just render configuration for servers somebody else runs, but deploys and operates BIND9, PowerDNS, Technitium, and Kea itself. Manage zones and records with per-server sync state, hand out DHCP scopes, pools, and static reservations per server group, and watch live leases reported back by the Kea agents. The IPAM side keeps spaces, blocks, and subnets in a tree with per-address DNS and DHCP sync, while the dashboard shows utilization, capacity, and platform health at a glance. Bring an existing estate with you through importers for BIND, Windows, PowerDNS, Technitium, Kea, ISC, and NetBox, and manage Windows DNS and DHCP agentlessly over WinRM when a full cutover is not on the table. Delegate safely with group-based roles over LDAP, OIDC, SAML, RADIUS, or TACACS+, search every object globally, and keep an append-only audit log of who changed what. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

For agencies that bill by the hour, Miru replaces the stitched-together timer, spreadsheet, invoicing app, and payment tool whose numbers never quite agree. It puts the whole money workflow in one place, from the first tracked minute to the paid invoice. Start a timer or log time against a project, then turn the accumulated billable hours into an invoice without retyping a single line. Log expenses as they happen, attach them to the right client work, and review them before they reach an invoice. Send the invoice and collect through Stripe or PayPal, watching status and amounts from a single cash flow view instead of chasing payment threads. The dashboard keeps revenue, active projects, and team momentum visible at a glance, while reports break down utilization and aging so overdue money gets a follow-up before it gets forgotten. Manage clients, projects, and team members with their roles in the same system that records their hours, and keep employee records and payroll reminders alongside the billing data they support. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Spreadsheets and sticky notes stop scaling the day your network grows past a rack or two, so JT-IPAM keeps every address, subnet, and device in one searchable system of record. Track subnets and individual IPs with their hostnames, MAC addresses, and owners, then reconcile what you documented against what scan agents actually find through ICMP, ARP, reverse DNS, and SNMP collection from routers and switches. Connect the DNS servers you already run, from PowerDNS and BIND 9 to Windows DNS and Technitium, and flag records that have no matching address in IPAM. Pull devices and virtual machines in from LibreNMS, Zabbix, Proxmox VE, ESXi, Hyper-V, and OpenStack so monitoring and address records stop drifting apart. Draw floor plans and rack elevations, trace a cable across multiple hops, and open an SSH terminal, SFTP browser, or RDP desktop to a device straight from its address page. Route new address requests through configurable multi-stage approval workflows, distribute certificates to web servers and firewalls from central encrypted storage, and keep a full audit trail of every change and console session. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Instead of one chatbot that confidently declares victory, Kwant gives you a whole team of AI bots that check each other's work before anyone says done. Create spaces for work, a side project, and home, each with its own bots, teams, channels, routines, and accounts, then watch messages route automatically to the bot whose skills fit, with a line under every reply explaining why that bot answered. Bots hand tasks to each other with a mention, and every hand-off becomes a card on the Mission board showing verified results this week, their cost, and what still needs you. A card turns Verified only when Kwant runs the check itself, such as a test or a file check, and keeps the receipt, because files a bot attaches are evidence, never proof. Connect several Claude, Codex, or Grok logins plus Anthropic, OpenAI, or xAI keys, set a priority order, and a turn moves to the next account when one runs out of usage. Schedule routines that run while you are away, collect waiting, finished, and failed work in one Inbox, and approve risky steps like pushes or payments from a card that shows the exact command first. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Doorman puts one controlled front door in front of every API you run, instead of teaching each service to reinvent keys, quotas, and abuse protection. It routes REST, SOAP, GraphQL, gRPC, gRPC-Web, and AI traffic through a single gateway while its control plane handles the surrounding work. Catalog APIs in a visual builder, configure protocols and endpoints, validate schemas, and manage semantic versions with deprecation and sunset dates as interfaces evolve. Control who may call what through users, roles, groups, and subscriptions, then attach credit tiers and quotas so heavy consumers stay inside the plan you sold them. Slow abusive clients with rate limits, throttling, and bandwidth caps, and keep flaky upstreams from cascading through retries and circuit breaking. Follow every request in searchable logs, review security controls and audit activity, and move configuration between environments with import and export. Start in a self-contained in-memory mode for a small deployment, then switch to shared MongoDB and Redis when several gateway instances need the same counters, revocations, and routing state. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Stop pasting passwords into chat threads that keep them forever: 1time turns a secret into a link that opens once and then deletes itself. Paste a database URL, an API key, or any sensitive text, choose how long the link may live, from an hour to thirty days, and decide whether one person or up to ten may open it. Add a passphrase when the link alone should not be enough, then copy the ready link and send it through whatever channel you already use. The recipient opens it, sees the decrypted message with a copy button, and the message is burned, gone from the server the moment it is read. Files work the same way up to 250 MB, encrypted with their name and type and uploaded in pieces so a dropped connection only resends one chunk. Encryption happens in your browser before anything uploads, and the key travels inside the link itself, so the server holds only ciphertext it cannot read. A password generator, a command line client, and a browser extension that shares selected text speak the same protocol against your own instance. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

For teams drowning in pipeline output nobody reads, Depictio turns workflow results into dashboards you can hand to a collaborator. A MultiQC tab answers the first questions about a sequencing run: how many reads survived trimming, how evenly they spread across samples, and whether base quality holds to the end of the read, all in one glanceable table. Filter by sample, habitat, site, or sampling date on the left and every panel on the page follows, from community composition cards counting distinct taxa and phyla to differential abundance views that show what was tested, what survives correction, and how large the effects are. Alpha diversity tabs summarise richness and evenness per sample with rarefaction curves, and a sampling sites map lets you click or lasso points to filter the whole dashboard by geography. Forty two ready-made templates cover nf-core pipelines such as ampliseq, atacseq, and airrflow, while outputs from Nextflow, Snakemake, Galaxy, or plain shell scripts feed the same builder. Even a classic tabular dataset becomes an overview of distributions, box plots, and threshold counts, so the same tool serves a wet lab and a data science team. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Sell from one storefront or eleven at once: Maho runs your whole shop, from the product grid shoppers browse to the admin grids where you run the business. Customers filter arrivals by price, color, size, fit, and material, open a product page with gallery, stock status, and reviews, and check out in one step with social login and saved cards. In the admin you build customer segments from lifetime value and last-order rules, shape Google Shopping feeds element by element in the XML builder, review revocation requests in a searchable grid, and set up gift cards with fixed amounts and lifetimes from the product tab. Eleven storefront themes come with a live theme editor, a drag-and-drop page builder, an image editor, and content versions, while marketing tools cover email automation, dynamic categories, and a blog. Multi-store setups run many websites, stores, and currencies from one installation, and payments span PayPal, Braintree, Mollie, Klarna, and more first-party modules. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. OSL-3.0 licensed.

Your money lives in plain text forever here: Beancount.io keeps double-entry books in readable .bean files you can diff, back up, and open in any editor, then turns them into polished reports you can explore in a browser. Open the income statement to see monthly net profit with income and expense trees, switch to the balance sheet for net worth over time with assets, liabilities, and equity broken down by account, or browse the journal to filter more than a thousand transactions by date, account, narration, or payee. The accounts page lists every account with its status, open date, and posting count, and the overview pulls net worth, account balances, recent activity, and income against expenses onto one page. Record the same entry from the web journal, the bea command line, Python, or native phone apps, because every surface reads and writes the same ledger file. Statement import, bank reconciliation, BQL queries, and month-end close prompts are built in for automation, and an MCP server lets coding agents query and edit the ledger with dry-run previews and per-call authorization. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Casnode is a community forum that feels like Discourse from the first click, with topic lists, timelines, and a docked composer your members already know how to use. Readers browse Latest, New, Unread, Hot, and Top topics by category or tag, follow threads with a timeline scrubber and topic map, and jump back in exactly where they stopped reading. Writing feels familiar too: the composer offers Markdown with live preview, drag-and-drop image uploads, mentions, quoting, drafts, and emoji, so long technical answers are painless to produce. Every page is rendered on the server with canonical URLs, Open Graph data, sitemaps, and RSS feeds, which means search engines index your discussions properly instead of seeing an empty app shell. Accounts work out of the box with email and password, and administrators can add single sign-on through any OpenID Connect or OAuth provider, or connect Casdoor for SAML, LDAP, and a hundred more identity sources. Moderators get flags, a review queue, and controls to close, pin, archive, or recover topics, while the admin panel handles site settings, branding, users, categories, and posting limits. Personal messages, user profiles, notification levels from Watching to Muted, and light and dark themes round out daily life for the community. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

GitArena gives your team its own place to host code, combining repository hosting, issue tracking, and code review in one lightweight service you run yourself. Push and pull over HTTP or SSH, browse code in the browser with syntax highlighting, blame, and raw views, and follow commit history with diffs branch by branch. Repositories can be forked, archived, tagged, and released with downloadable assets, and every project gets an issue tracker with labels, milestones, assignees, and a kanban board. Issues are stored natively in Git using the git-bug format, so they travel with the repository and remain readable offline with the git-bug CLI. Merge requests collect changes for review before they land, while organizations and teams control who can see and change each project. Search spans code, repositories, issues, and users from one box, profiles show contribution graphs and activity, and sign-in supports passwords, SSH keys, passkeys, and OAuth single sign-on. A REST API exposes the platform to your own tooling, and the whole service runs from a single Docker Compose stack or a compiled binary with a separate frontend build. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Uchiyomi is the manga server that also does the fetching, so your library keeps itself up to date while you just read. Follow a series once and new chapters download automatically from MangaDex, from sites you add by URL, or through installable Mihon extensions, with a release radar estimating when the next chapter is likely to land. The reader is built for webtoons first: continuous scrolling flows straight into the next chapter, wide pages split cleanly, borders crop away, and credit pages collapse so you reach the story faster. Your existing CBZ, CBR, PDF, and image files join downloaded series in one searchable library with covers, progress, filters, and smart lists you can share with the household. A health screen hunts down chapter gaps, short or corrupt downloads, duplicates, and failing sources, and Fix Everything works through the repairs on demand or nightly. Reading stats draw a year heat map of your habits, top series, and reading time, while Moments let you star favorite panels with notes. Each household member gets their own account, progress, libraries, and age limits, with two-factor sign-in and offline downloads that keep favorites ready on your phone. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MPL-2.0 licensed.

Genealogy turns scattered family records into a living, browsable family tree that relatives can explore together and keep growing. Each person gets a full profile with parents, partners, children, and siblings, and couples are first-class records too, so remarriages, separations, and blended families are represented honestly instead of being forced into a single marriage box. Photos can be uploaded in batches, watermarked, and browsed in a carousel on the profile, while documents attach the scans and certificates that back up each fact. Events build a timeline overview for every person, so births, marriages, moves, and milestones read as a story rather than a spreadsheet. Several branches can live side by side: separate trees are organized as teams with owners, managers, editors, and read-only members, ownership can be transferred, and invitations keep research private to the family. Personal settings follow each user, including language, timezone, and a light or dark theme on any screen size. A built-in backup manager runs manual or scheduled daily backups with cleanup and email confirmation, and a log viewer surfaces slow queries and errors before they surprise you. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

One binary, no JavaScript required, no database server to babysit: Freedit is a complete forum that starts in seconds and stays out of your way. Communities organize into Inns, group spaces in the style of subreddits, where members post links and discussions under topics you define. A Solo feed adds personal microblogging for short posts that sit beside the forum instead of competing with it. The built-in RSS reader follows your favorite sites and brings new articles into the same place you discuss them, and podcast subscriptions play episodes in the browser with subtitles that scroll in sync with the audio. Private messages are encrypted end to end, so only the sender and recipient can read them. Posts support Markdown, mathematics, and syntax-highlighted code, rendered on the server so every page works even with JavaScript disabled in the browser. Because there is exactly one file to deploy and the database lives inside it, backups are a copy and upgrades are a swap. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Every homelab outgrows the browser bookmark folder, and Compass answers by building the front page for you, discovering your services automatically instead of asking you to maintain cards by hand. Point it at Docker, Kubernetes, Tailscale, Headscale, NetBird, DNS records, a JSON API, or a plain static list, and it renders everything it finds as a searchable directory with icons, descriptions, and tags filled in from a catalog when a source leaves them blank. Each card shows whether the service is actually up, using the Prometheus or Gatus monitor you already run, and pinned and recent services keep daily tools one click away. Opening a service reveals its connection details, source metadata, extra links such as runbooks and health endpoints, and panels you embed from Grafana. Markdown pages live beside the directory, so architecture notes and on-call runbooks sit in the same navigation, with live service cards and charts embedded directly inside the prose. A debug view shows per-source health, what each source returned, and why a service you expected is missing, while group-based access decides which sources each person can see. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache License 2.0 licensed.

OpenResto is a self-hosted booking system that lets restaurants, bars, and cafes take reservations from their own website instead of paying a platform for every cover. Guests browse your locations, pick a party size, date, and time, and the exact table is held for five minutes while they type a name and email, with no account to create and nothing to install. Slots are grouped into Lunch, Dinner, and Off-Peak so guests jump straight to the sitting they want, and confirmation pages offer calendar export, reminders, and directions. Staff run the night from a dashboard with a live bookings list, a day timetable, and a service view, extending or cancelling reservations and pausing new bookings during private events without editing any configuration. One instance manages several restaurants, each with its own floor sections such as Patio or Bar, opening hours in its own timezone, policies, and pacing rules. The whole guest experience carries your name, colors, and icon, and the same screens can even be published as your own phone app. Every admin action lands in an append-only activity trail, and scoped API keys let your other tools read bookings without ever seeing guest contact details. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.