OpenMail
Your entire mail system can live in one self-hosted suite with OpenMail, from SMTP, IMAP, and POP3 delivery to three-pane webmail and the admin console that runs it. Standard clients such as Thunderbird, Apple Mail, and phone apps connect over SMTP ports 25, 587, and 465, IMAP ports 143 and 993, and POP3 ports 110 and 995, while people use the three-pane webmail with folder tree, conversation list, and reading pane at port 3000. You read, write, reply, forward, batch-organize, drag messages between folders, filter stars, search sender, subject, and body text, and follow conversations threaded automatically by their References headers. The rich-text composer autocompletes recipients, accepts dragged attachments and pasted screenshots, saves drafts every 12 seconds, sends on a schedule, and inserts reusable templates imported from HTML or generated with AI. Any OpenAI-compatible endpoint can draft replies, translate mail into twelve languages, and summarize messages, with provider keys encrypted on your server. Administrators get real-time mail statistics with 14-day send and receive trends, user quotas and bans, multi-domain aliases and catch-all addresses, outgoing queue visibility, and audit logs. Adding a domain generates DKIM keys and copy-ready SPF, DKIM, and DMARC DNS records with one-click checks, while rule-based spam scoring, TOTP two-factor authentication, and role-based permissions protect accounts in ten interface languages including right-to-left Arabic and Urdu. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Linux Update Dashboard
Linux Update Dashboard is a self-hosted web app that lets you check and apply package updates across a whole fleet of Linux servers from one browser dashboard, over SSH, with no agent installed on any managed machine. It discovers each server's package managers, operating system, installed packages, reboot state, and distribution lifecycle, then lets you refresh, upgrade selected packages, run full upgrades, autoremove leftovers, cancel running work, or reboot remotely while watching real-time command output stream into the page. Groups with health badges and explicit priorities organize fleets for clear overviews and ordered Upgrade All batches that run as waves across eligible systems. An encrypted SSH credential vault stores reusable passwords, private keys, and OpenSSH certificates with AES-256-GCM, and you can view or edit repository source files through sudoedit with diff review and activity history. Cron-based schedules automate refreshes, updates, autoremove, reboots, and notifications for chosen systems, while alerts go out by email, Gotify, MQTT, ntfy.sh, Telegram, or webhooks, with Home Assistant MQTT discovery entities for every server. Sign-in supports passwords with optional TOTP, passkeys and WebAuthn, OpenID Connect SSO, and API tokens, and the interface speaks ten languages with dark and light themes and custom branding. Because this tool can run commands on your servers, keep it on trusted networks behind TLS, a reverse proxy, or a VPN. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
Keygate
Software makers who would rather not rent a licensing backend use Keygate to issue, sell, and enforce license keys from infrastructure they control. You create desktop, SaaS, or hybrid products and sell them as subscriptions, perpetual licenses, perpetual licenses with a maintenance period, trials, or floating concurrent licenses that are checked out, heartbeated, and returned automatically. The admin dashboard manages products, plans, customers, licenses, API keys, webhooks, analytics, audit logs, team members, email templates, and branding, with search, filters, and CSV or JSON export. Your application activates and verifies keys through the license API, enforces per-device or per-user activation limits with grace periods, and can verify Ed25519 signed tokens offline with a public key. Usage metering tracks API calls, storage, bandwidth, or custom metrics against quotas with hourly, daily, monthly, or yearly reset cycles and webhook threshold warnings. Connecting Stripe makes checkout create licenses automatically, follows plan and seat changes with proration, handles refunds and cancellations, sends dunning emails after failed payments, and gives customers a billing portal and self-service license management. Team seats, feature entitlements, purchasable add-ons, scoped API keys, and optional S3-backed release hosting round out the selling stack in one binary with one PostgreSQL database. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
ShopNex
ShopNex is a self-hosted ecommerce platform that gives merchants a browser admin, themeable storefront, hosted checkout, and app integrations without paying a platform subscription or per-sale software fee. You manage products with options, variants, SKUs, stock per variant, collections, product images, and clean URLs, then sell through a bundled Astro storefront using Liquid themes or a custom frontend connected to the typed Storefront SDK. The hosted checkout collects shipping rates, manual payment methods, discount codes, and Stripe Checkout payments, while order records keep payment and fulfillment status, shipping lines, transactions, and price snapshots separate for clean operations. Customer accounts and guest orders are matched by email, staff access is invite-only with owner, admin, and staff roles, and discounts, shipping, taxes, and store settings are controlled from the admin. Integrations receive signed Standard Webhooks with retries and admin redelivery, scoped API tokens grant only the resources an app needs, and OAuth apps clean up tokens and webhooks when uninstalled. You can run one shop by default or switch to multi-shop by domain without migrating data, and every admin and storefront procedure is also exposed as REST under /api/v1 with a live OpenAPI document. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Rustunnel
Rustunnel turns a service running on your laptop or private network into a public HTTPS, TCP, or UDP endpoint without opening inbound ports on the machine where it lives. Point the client at a local port and share the public address for webhook testing, a quick demo, an AI agent tool, SSH access, a game server, or an IoT device that cannot accept inbound connections. Give tunnels custom subdomains on your own wildcard domain, terminate HTTPS with automatic Let's Encrypt certificates, and keep client traffic encrypted from edge to local service. Put several backends behind one subdomain or TCP port and let TCP or HTTP health probes remove sick members before visitors hit them. When two peers can reach each other directly, start a P2P tunnel with NAT hole punching and QUIC, with relay fallback when the direct path fails. Watch sessions, tunnel health, traffic, and request logs from the live dashboard, inspect headers and bodies in the local request inspector, and replay a captured call while debugging a webhook. Manage tunnels, tokens, groups, captured requests, and history through the REST API, scrape Prometheus metrics, review audit logs, or let an MCP-compatible coding assistant create and close tunnels in plain language. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
Edi Life OS
Edi Life OS puts the habits, goals, projects, money, focus sessions, and notes that usually live in five separate apps into one calm dashboard on your own server. Start the day from an Overview that rolls focus, habit trends, goals, finances, and the week ahead into one readable score. Connect long-term goals to six life areas, drive progress from a checklist, a measure, or a habit you actually keep, and use weekly, monthly, or quarterly reviews to choose the next honest step. Log daily habits with streaks and monthly progress, run timed focus sessions with short and long breaks, and keep a history of the deep work you finished. Track expenses, income, budgets, debts, and credits in your chosen currency, including recurring entries that land straight in the ledger. Plan projects on draggable Kanban boards with labels, priorities, due dates, checklists, comments, and attachments, then see card deadlines and money dues together in one calendar. Capture Markdown notes with preview and export, pin sticky notes with colors and connections, and give each account its own private workspace, theme, and currency. Ask an AI assistant through the optional MCP server to read your dashboard, create goals, log habits, or record expenses through a token-protected API that never touches the database directly. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
OpsiMate
OpsiMate gives on-call teams one queue for alerts that would otherwise arrive in five different dashboards, each demanding attention in its own tab. Connect Grafana, Datadog, Zabbix, Uptime Kuma, Google Cloud, or any custom webhook source and watch incoming alerts land in one table with their source, service, severity, tags, and status attached. Filter the noise down to the team or service you own, group related alerts so one incident does not look like forty separate emergencies, and use mute policies when a known problem should stop paging people. Acknowledge work with one click, assign ownership so nobody wonders who is responding, resolve alerts from the same screen, and follow deep links back into Grafana or Zabbix when you need the original chart or trigger. Let supported integrations auto-resolve alerts when the underlying monitor recovers, and use root-cause notes and insights to keep the next responder from starting at zero. Discover services running in Docker, Kubernetes, and Linux virtual machines so the alert queue stays connected to the infrastructure behind it. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
Kula
Kula watches a Linux server every second and turns CPU, memory, disks, network, containers, and applications into a live dashboard you can open before trouble becomes downtime. Follow total and per-core CPU, load averages, memory and swap pressure, disk I/O, filesystem space, temperatures, GPU load, and network throughput as charts update live in the browser. Drag to zoom into history, switch to focus or TV mode for a wall display, and check the System Info page when you need the hardware story behind a spike. Watch Docker, Podman, and cgroup containers beside host metrics, then add PostgreSQL, MySQL or MariaDB, nginx, and Apache monitoring or define custom metrics for the odd service only your team understands. Scrape the Prometheus endpoint into an existing observability stack, open the terminal UI over SSH for a quick live read, or ask the optional local Ollama assistant to discuss charts without sending data to a cloud service. Protect the dashboard with optional Argon2id logins and multiple users, schedule storage snapshots, and keep the whole tool working on closed networks with no external calls. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
Cinephage
Cinephage puts your movies, series, live TV, subtitles, indexers, and download clients into one self-hosted media command center instead of a stack of separate automation services. Browse and organize libraries from a responsive interface that works on desktop and mobile, with file scanning and metadata matching keeping titles identified correctly. Search across configured indexers, compare releases with quality profiles and custom scoring rules, and send chosen downloads to your client without repeating setup for each media type. Let monitoring tasks watch for missing episodes, upgraded releases, and newly aired content, while the blocklist stops failed releases from coming back. Pull subtitles from multiple providers with language profiles, create dynamic smart lists from list sources or custom queries, and add matching titles automatically. Generate streaming links as .strm files for players such as Jellyfin, Emby, and Kodi, try live TV channels with guide data where configured, and receive library update notifications in your media server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.
CRW
CRW gives your apps and AI agents a private web data API that scrapes pages, crawls sites, maps links, and searches the web without sending every request to a hosted scraping service. Post a URL to the scrape endpoint and receive clean Markdown, HTML, screenshots, links, or structured JSON shaped by a schema you supply. Start a crawl when a whole section matters, then poll for progress while CRW walks pages asynchronously and returns the collected content in one job. Use map first to discover the URLs on a site before spending effort extracting pages you do not need. Connect agent tools through the MCP endpoint so assistants can search, scrape, and crawl from the same self-hosted service your applications call. Add browser rendering when JavaScript-heavy pages hide content from a plain HTTP fetch, and keep simpler pages on the fast lightweight path. Protect a public deployment with Bearer token authentication, your own reverse proxy, logging, and rate limits, or keep the service inside a private network for internal tools. Run one Docker container for the core API, or use the Compose stack when you want bundled search and rendering sidecars beside it. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
prest
pRESTd points at your PostgreSQL or MySQL database and instantly serves every table as a REST API, so the CRUD backend you were about to spend a week writing already exists. Every table answers at its own address with filtering, ordering, pagination, and column selection in the query string, and batch endpoints group several operations into one call. When a table endpoint is not enough, drop a SQL file into the queries folder and it becomes a named route with bound parameters, or store the scripts in the database and manage them through the admin API. Turn on the auth module and the server issues JWTs from your own users table, checks them on every route, and enforces table-level permissions so public tables stay open while payroll stays shut. The same database also appears as a read-only MCP endpoint, which lets Claude, Cursor, and other AI clients discover your tables and query them with your permissions instead of a copied export. One process can front several databases at once, Postgres and MySQL side by side, each under its own alias for tenants or reporting replicas. An embedded Studio in the same binary browses the catalog and rows, builds GET requests, and invokes MCP tools, so you can inspect everything from the browser before writing a line of client code. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Neko Master
Neko Master watches every connection flowing through your Clash, Mihomo, or Surge gateway and turns the stream into a live map of devices, domains, countries, and proxy nodes, so questions that once needed packet captures get answered at a glance. The dashboard refreshes over WebSocket as traffic moves, charting upload and download trends across thirty minutes, one hour, or a full day. Domain views rank every host your network contacts by traffic and connection count, and IP views add ASN and geographic detail, so an unfamiliar endpoint explains itself instead of raising an alarm. Proxy statistics break traffic down per node and per rule, which makes a saturated exit, a misrouted application, or an underused subscription obvious in seconds. One panel watches several gateways at once: add OpenClash backends directly, or install the one-command agent on OpenWrt, Linux, or macOS machines beside remote gateways and let each agent report home. Because agents open the connection outward, gateways behind NAT still report in, and the panel never reaches into your network uninvited. History persists in SQLite by default, and busy networks can dual-write traffic statistics to ClickHouse for larger histories while configuration stays in SQLite. Token-based access control protects the dashboard, dark mode and an installable PWA keep it comfortable on a phone, and the interface switches between English and Chinese. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Talivia
Founders do not need another chart of pageviews; they need to know which visit became money, and Talivia is a self-hosted, revenue-first analytics platform that fuses website traffic with payment data so every metric answers in dollars. Connect Stripe, LemonSqueezy, Polar, Dodo, or Yolfi, and the dashboard pairs visitor counts with revenue, conversion rate, revenue per visitor, refunds, and disputes, so a traffic spike that never buys anything stops masquerading as success. Referrers, campaigns, keywords, and countries are ranked by the money they produce, which reduces budget decisions to one question: which channel brought customers who actually paid? When a page underperforms, session replay shows what visitors actually did there and the moment they gave up, so you debug journeys instead of guessing from aggregates. Events and multi-step funnels trace the path from landing page to checkout, while bot traffic detection stops crawlers from inflating your conversion statistics. The live visitor feed shows who is browsing right now, with country, device, browser, acquisition source, events, and spend for each session as it unfolds. Public links publish any dashboard as a read-only page for investors or clients, and teammates join the workspace with their own accounts when they need to dig deeper. Visitors, replays, and payment records all stay in your own PostgreSQL database, so customer journeys never pass through a third-party analytics cloud. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Kubewall
One binary is all that stands between you and every Kubernetes cluster you own: Kubewall opens a realtime web dashboard over all of them, with no agents to install and nothing phoning home. Switch between clusters from the sidebar and browse workloads, networking, storage, configuration, and access control in tables that update live as pods start, fail, and reschedule. Open any resource to inspect its overview, edit its manifest in the built-in YAML editor with validation, watch its events, or stream logs aggregated across pods and containers with search and tail controls. A command palette jumps straight to any resource type, while faceted filters and global search cut through thousands of objects by name, namespace, label, or image. Scale deployments, restart pods, trigger rollout restarts, and apply manifests with a click, or forward a cluster service to your local machine without memorising kubectl incantations. An integrated AI assistant, connected to OpenAI, Claude, Gemini, DeepSeek, OpenRouter, Ollama, or a local model, helps troubleshoot failures and review configurations right beside the resource it concerns. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.
Serviette
Your documents change every day, and your RAG answers should change with them: Serviette keeps a chat and REST API continuously in sync with the files you point it at, no re-indexing jobs to remember. Point it at a local folder, Google Drive, S3 or MinIO bucket, SharePoint library, or even an FTP or WebDAV share, and edits, additions, and deletions flow into the index in real time. One YAML file, or the interactive wizard, chooses among eight vector databases, from embedded DuckDB with zero setup to pgvector, Qdrant, Milvus, Chroma, Weaviate, Pinecone, or MongoDB Atlas. Text, Office files, PDFs with tables, and scanned images are parsed and answerable by default, with audio and video joining when you add the keys. Embeddings can run fully locally with no credentials, and keyless answers simply quote the retrieved passages with their sources. The indexer and the stateless server scale independently, the server shards across workers with one config line, and both a ChatGPT-style web chat and a versioned /api/v1 retrieval API answer on the same port. A free license key from Pathway activates the engine, and benchmarks cover corpora up to 50 GB of text. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Omnara
Running AI agents in production takes more than a model call: Omnara supplies the durable runtime, tools, approvals, and complete event history around any model, on your own machines. You define an agent once in a small YAML file: instructions, a model from OpenAI, Anthropic, OpenRouter, Bedrock, LiteLLM, Ollama, or your own endpoint, and the machines it may use. Launch agents from the REST API, the TypeScript SDK, the command line, or the dashboard, then stream every event live or receive it as a webhook while the agent works. Agents run shell commands and edit files on sandboxes from twelve providers, or on your own laptops, VMs, and containers through a daemon that connects outward, so no inbound ports or SSH keys are exposed. Every step is written to Postgres as an event log, which means an agent survives crashes, restarts, and disconnected machines and resumes exactly where it stopped. Tool permissions can run immediately, ask a person first, or block outright, and agents can start subagents, follow cron schedules, and keep shared memory files between conversations. Teams meet the agents where they already talk: mention the bot in Slack or Discord, or let a GitHub pull request trigger a review, with questions and approvals handled in the thread. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.
Codeg
Run Claude Code, Codex, Gemini CLI, OpenCode, and sixteen other AI coding agents from one workspace instead of juggling twenty terminals. Every agent connects through the Agent Client Protocol, so conversations render as structured chats with tool cards, live diffs, and interactive replies rather than raw terminal scrollback. Codeg imports the session history each agent already keeps on disk, making every past conversation searchable and resumable, even when you hand the thread to a different agent. Mention one agent with an @ to delegate work to another, or run several side by side and watch their progress stream into the same conversation. Queued to-dos execute unattended in isolated git worktrees, leaving finished changes ready for your review and approval instead of touching your working tree. An infinite canvas arranges chats, files, terminals, and notes on one board, while git tooling, token usage tracking, and MCP server support stay one panel away. Deployed as a headless server, Codeg answers in any browser and through Telegram, Lark, and WeChat channels, so agent work continues while you are away from your desk. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.
Uncloud
Scatter a few cheap VPS boxes, a home server, and one bare metal machine across three different providers, and Uncloud still treats them as a single place to run your applications. You describe services in ordinary Docker Compose files, deploy them with the uc command line tool, and publish any container port as a public HTTPS endpoint in a single command. Every machine joins an encrypted WireGuard mesh with its own container IP addresses, so services on different continents reach each other directly without VPN configuration or exposed ports. A built-in DNS server resolves service names to container IPs, and the integrated Caddy reverse proxy provisions and renews Let's Encrypt certificates automatically, sharing them across the cluster. Rolling updates replace containers with zero downtime, persistent Docker volumes keep stateful services safe, and the Unregistry integration pushes image layers straight to your machines when no registry is available. There is no control plane to babysit: each machine keeps a synchronised copy of the cluster state, and SSH access to any single node is enough to manage the whole fleet. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.