Instead of trusting one search company with every query, degoog is a self-hosted search aggregator that fans each one out to the engines you choose, from your own server, and merges the answers into one deduplicated, ranked list. It installs with no engines at all; a first-run tour then walks you through picking Google, Bing, DuckDuckGo, Brave, Startpage, Reddit, or Wikipedia from the built-in Store. Pages found by several engines collapse into a single row that lists every source, while a sidebar times each engine, explains failures like rate limits or CAPTCHAs, and retries only the one that failed. Tabs appear for each search type your engines serve, and the Images tab adds size, color, layout, and safe-mode filters beside a zoomable preview panel. Bangs target one engine or run commands (!w for Wikipedia, !ip, !speedtest, !uuid), and Store plugins add weather, definitions, QR codes, and search across your own Jellyfin or Meilisearch libraries. Owners can block, rewrite, or score domains, serve a script-free page to text browsers, and turn on an indexer that remembers seen results for later recall. A JSON search API, a SearXNG-compatible response mode for Open WebUI, and an MCP companion feed the same results to scripts and LLM clients. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Any existing relational database becomes a collaborative, Airtable-style smart spreadsheet under NocoDB. It connects to PostgreSQL, MySQL, MariaDB, SQL Server, or SQLite, introspects the schema - tables, relationships, indexes - and renders it as interactive Grid, Gallery, Kanban, Calendar, and Form views without migrating a single row. Your business data stays in your database; NocoDB keeps only its own metadata (view configs, permissions, webhooks) in a separate store. Every connected table automatically gets REST APIs with Swagger documentation, effectively turning legacy databases into modern backends. The spreadsheet layer adds 20+ field types including formulas, lookups, rollups, links, attachments, and currency, plus sorting, filtering, grouping, and multi-field editing. Views can be locked or shared publicly with password protection, role-based access control scopes permissions per user, and webhooks plus CSV, Excel, and Airtable import round out integration. An ERD view visualizes the schema. Built with Node.js and Vue, deployed via Docker, handling millions of rows.

Retool's job, self-hosted: ToolJet is an open-source low-code platform for building internal tools, dashboards, and admin panels. Apps are assembled in a drag-and-drop visual builder with 60+ responsive components, including tables, charts, forms, and lists, and connected to 80+ data sources: PostgreSQL, MySQL, MongoDB, REST and GraphQL APIs, cloud storage, and common SaaS tools. When visual configuration is not enough, you can run JavaScript or Python inline for queries and transformations. A built-in no-code database (ToolJet Database) covers apps that need their own tables without provisioning an external database, Workflows add node-based automation for background jobs with dedicated worker containers and a Redis-backed queue, and multi-page apps with multiplayer editing, inline comments, and mentions support team development. Security is designed for internal data: credentials are AES-256-GCM encrypted, data flows proxy-only through your server so database contents never reach a third-party cloud, and granular per-app access control plus SSO gate each tool. Where Retool-style platforms bill per builder and sometimes per end user, the self-hosted Community Edition serves unlimited builders and users at hosting cost, and full source availability means the platform itself can be forked, audited, and extended. The stack is Node.js and React on PostgreSQL, deployed via Docker.

Teams that cannot send messages through someone else's cloud run Mattermost - the open-core, self-hosted alternative to Slack. It provides public and private channels, threaded discussions, unlimited search history, file sharing with previews, one-to-one audio calls, and screen sharing, with desktop clients for Windows, macOS, and Linux plus iOS and Android apps. Messages support full Markdown, which suits engineering conversations with code blocks and logs. Playbooks turn repeatable processes such as incident response and release management into checklist-driven workflows with automated triggers and retrospectives. Integration is a core strength: prebuilt connectors for GitHub, GitLab, Jira, ServiceNow, and PagerDuty, plus webhooks, slash commands, bots, a REST API, and a plugin marketplace with 700+ entries - together making it a working surface for ChatOps rather than just a chat room. Playbooks add keyword and event triggers, task assignment, status broadcasting, and post-incident retrospectives, so operational knowledge is not trapped in individuals' heads. The server is a single Go binary backed by PostgreSQL, with React clients, released monthly under MIT license and deployable fully air-gapped - which is why governments and defense organizations run it inside closed networks, and why the same control applies to any team with confidentiality requirements. The compiled Team Edition is free for unlimited users with no message history cutoff, so costs stay flat as the team grows.

Ever Gauzy consolidates ERP invoicing, CRM sales pipelines, HRM employee records, applicant tracking, and project management into one full-stack TypeScript platform, eliminating the need to stitch together five separate SaaS subscriptions. Over 4,300 GitHub stars and 3,800+ releases back a CQRS architecture that separates command and query responsibilities across modules for invoices, expenses, payments, inventory, contacts, leads, deals, employee onboarding, candidate interviews, hiring workflows, sprints, goals, and KPI tracking. Time tracking captures hours via web timer, Electron desktop timer with activity monitoring and automatic screenshot capture, or browser extension, with timesheet submission and approval workflows supporting billable hour classification across Hubstaff and Upwork integrations. The multi-tenant architecture provides automatic tenant scoping with role-based permissions, while dual ORM support through TypeORM and MikroORM with Knex query builder ensures database flexibility across PostgreSQL, MySQL, and MariaDB. REST APIs documented with OpenAPI and Swagger expose every module for headless operation, complemented by an MCP server offering 323 tools for AI assistant integration. The Angular 19 dashboard provides dark, light, corporate, and material themes with i18n across 10 languages via Crowdin. Supports Docker, Kubernetes, Terraform, and Pulumi deployment with Redis caching and OpenSearch full-text indexing. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Unify fragmented corporate knowledge across chat channels, documents, and cloud drives with PipesHub, an open-source workplace context platform providing permission-aware search and verifiable answers for teams and autonomous agents. Employees can query enterprise knowledge bases through a conversational interface that retrieves relevant information across Google Workspace, Microsoft 365, Slack, Confluence, Jira, and GitHub while strictly respecting individual user access permissions. Knowledge workers can verify every answer through clickable citation blocks that trace claims directly back to source documents, spreadsheet rows, or chat messages. Teams can assemble custom AI agents visually using a drag-and-drop builder, combining retrieval collections with interactive toolsets to automate multi-step operations like drafting customer responses or creating issue tickets. Autonomous agents connect via Model Context Protocol to inspect shared company knowledge and perform external actions across connected SaaS tools. Organizations can index scanned PDFs, slide decks, markdown pages, and spreadsheets with OCR and document parsing, maintaining synchronized records through automated schedules. Administrators can inspect synchronized records, monitor query history, and manage connector credentials across all integrated business applications. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache License 2.0 licensed.

DCM is a visual builder that eliminates docker-compose copy-paste anxiety for home server enthusiasts. The TypeScript and Next.js web interface on port 7576 presents a curated catalog of popular self-hosted applications organized into categories: media management with Jellyfin, Plex, Sonarr, Radarr, and Prowlarr; dashboards like Homarr and Heimdall; databases including PostgreSQL, MariaDB, MongoDB, and Redis; monitoring stacks with Grafana and Prometheus; download clients like qBittorrent and NZBGet; security tools including Vaultwarden; storage solutions like Nextcloud; and home automation via Home Assistant. Select any combination of containers and DCM generates both compose.yaml and .env files with correct volume mounts, environment variables, PUID/PGID ownership, network modes, and port mappings — ready to paste into your terminal. Automatic port conflict detection identifies clashing services and reassigns ports before you ever hit a deployment error. The Template Gallery ships predefined multi-container stacks for common setups: media servers, development environments, database clusters, and monitoring solutions — some incorporating ten or more services in a single template. Built as a static Next.js export served from a 62 MB multi-arch Docker image supporting amd64, arm64, and arm/v7, DCM runs on everything from rack servers to Raspberry Pis. Share generated configurations via URL or download them locally. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Authors delete listings, and the 3D models go with them, so Thingport stores its own copy of every printable file you import, in a self-hosted library you control. Ten sites feed the library, including MakerWorld, Printables, Thingiverse, and MyMiniFactory: paste a link or use the browser extension, and a model arrives with its files, photos, description, tags, author, and source link. Synced collections add newly bookmarked models as often as every hour. Files you already own come in as STL, 3MF, STEP, OBJ, or LightBurn uploads, ZIPs, folder trees, or drops into a watched consume folder. Each model gets an interactive 3D viewer with a thumbnail for every plate of a multi-plate 3MF. On first open, a check flags surface holes, non-manifold edges, flipped faces, and loose fragments before you slice. Sort with nested categories, collections, and tags, mark favourites, and find anything with full-text search. Optional AI sorts imports into your categories and tidies descriptions, using a local Ollama model or a cloud API. Open any file in Bambu Studio, OrcaSlicer, PrusaSlicer, Cura, or Creality Print, or download a model, tag, or collection as one ZIP. Every user gets a separate library, with invite-only registration, email verification, and single sign-on. A dashboard shows library statistics, profiles show a year-long activity heatmap, and MCP lets an AI assistant work with the collection. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Turn any chaotic digital book archive into an autonomous, self-organizing reading portal using Calibre-Web Automated, a digital library manager featuring hands-free format conversions, metadata fetching, and e-reader synchronization. Readers can drop raw ebook files into the automated intake directory and watch the system instantly convert between twenty-eight distinct file types, repair malformed EPUB internal markup, and fetch enriched metadata from Hardcover, Kobo, and ISBN databases. The responsive web reader lets you browse collections, read directly in any desktop or mobile browser, and organize titles into dynamic rules-based Magic Shelves that update automatically. Built-in KOReader sync harmonizes reading progress and bookmarks across mobile devices and e-ink readers, while native OPDS feeds connect seamlessly to your favorite external reader applications. Administrative tools empower you to run hybrid SQL and fuzzy duplicate detection scans, perform batch metadata editing across entire series, enforce cover art changes directly into source files, and auto-dispatch newly ingested books to Kindle or Kobo devices via scheduled email delivery. Granular multi-user controls allow administrators to assign folder permissions, restrict downloads, enforce dark mode themes, and authenticate readers securely through OAuth and OpenID Connect identity providers. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GNU General Public License v3.0 licensed.

ExcaliDash adds persistent storage, access control, version history, and real-time collaboration to Excalidraw, transforming ephemeral whiteboarding sessions into a managed drawing library your team can rely on. The Node.js/Express backend with React/TypeScript frontend deploys via Docker Compose on port 6767, using Prisma ORM on SQLite for all drawings, users, and metadata. WebSocket-powered collaboration lets multiple users edit the same canvas simultaneously with live cursor presence. Drawing snapshots preserve every revision with visual preview and one-click restore to any previous state. Three authentication modes handle different deployment needs: local email/password for personal use, hybrid mode mixing native credentials with OIDC for gradual enterprise adoption, and enforced OIDC-only for organizations requiring SSO through providers like Authentik or Keycloak. Scoped sharing controls determine whether drawings stay private, shared internally with team members, or accessible via external links without authentication. Collections organize drawings through drag-and-drop grouping, full-text search locates any diagram instantly, and exports use the non-proprietary .excalidraw format ensuring complete data portability. 1,350+ stars since November 2025. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Get ready to transform your audience into a thriving empire with Ghost, the ultimate toolkit for the modern creator on a mission to monetize their mojo. Picture this: a sleek website that screams 'you', bursting with content that captivates, newsletters that fly straight into inboxes, and a subscription service that turns followers into financiers. Wave goodbye to bland and hello to a smorgasbord of stunning, free themes that you can finesse to fit your unique flair. But wait, there's more! Ghost's editor is like the Swiss Army knife for content connoisseurs—slick, sophisticated, and oh-so-simple to use. Unleash your creativity with multimedia storytelling that includes everything but the kitchen sink—galleries, chucklesome gifs, videos, podcasts, you name it. And when it's time to hit 'send', those built-in newsletters make sure your words woo your audience without breaking a sweat. Want to play the mysterious type? Ghost's got you covered with native signup forms that turn casual lurkers into committed members. And because we all love a good sneak peek, Ghost dishes out the deets with analytics that spill the tea on who's loving your work the most. Plus, with tantalizing offers and promotions, you'll have new subscribers flocking like seagulls at a beach picnic. All this, hosted on RepoCloud, where the cost is as tiny as your chances of being bored. So, what are you waiting for? Let's Ghost!

Unpatched Linux servers expose production environments to critical vulnerabilities, and PatchMon eliminates that blind spot by centralizing package telemetry, security advisory tracking, and automated update orchestration across your entire fleet. Administrators can inspect pending updates across APT, DNF, YUM, APK, Pacman, Zypper, FreeBSD pkg, Windows Update, and winget from one unified queue without opening inbound firewall ports on monitored hosts. Before touching production workloads, operators run dry-run validations to preview exact package transactions, enforce multi-user approval workflows, and schedule rollouts during fixed maintenance windows. During execution, live agent output streams directly to the browser over WebSocket so engineers can watch progress in real time or halt a problematic upgrade mid-flight. Beyond package updates, the platform runs OpenSCAP CIS benchmark and Docker Bench security assessments, inventories running containers and outdated base images, and routes host-down or threshold alerts to Slack, Discord, Microsoft Teams, ntfy, or email. Built-in browser SSH and Apache Guacamole RDP terminals let teams troubleshoot machines directly through the outbound agent tunnel with role-based access control and OIDC single sign-on. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

InvenTree is an inventory management system for electronics manufacturers, makerspaces, and small-to-medium businesses. The hierarchical part categorization system organizes components into unlimited nested categories, while stock items tracked across cascading locations and sub-locations provide instant visibility into current inventory levels, with optional serial number tracking for individual item traceability and acceptance testing. Intelligent BOM management calculates sub-part requirements, validates availability against current stock, supports multi-format BOM upload including KiCad integration, and generates detailed bills of materials with full database enrichment. Build orders consume BOM-allocated stock to produce assembled parts with step-by-step work order tracking, while purchase orders manage supplier relationships with pricing history, lead times, and automatic stock receipt processing. The modern React frontend built with Mantine, TanStack Query, and Zustand provides responsive data tables, tree-select navigation, a preview drawer, and a snippet editor. The extensible plugin system supports 19 mixin types including BarcodeMixin for scanner integration, LabelPrintingMixin for Zebra and Brother printers, AppMixin for custom database tables, and ScheduleMixin for periodic background tasks. Companion mobile apps on Android and iOS provide barcode scanning and stock operations in the warehouse. Docker Compose deploys with PostgreSQL, MySQL, or MariaDB backends behind any reverse proxy. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Configure each indexer once, not five times: Prowlarr is the indexer hub of the *arr stack, removing the most tedious duplication in a media automation setup. Instead of configuring the same torrent trackers and Usenet indexers separately in Sonarr, Radarr, Lidarr, Readarr, and Mylar3, you add each one once in Prowlarr and it syncs them to every connected app automatically, complete with category mappings; with Full Sync enabled, adding or removing an indexer propagates everywhere, and a tracker URL change is a one-place fix. Coverage is the deepest available: 500+ torrent trackers with definitions added constantly, 24 native Usenet indexers, generic Newznab and Torznab support for anything else, and custom Cardigann YML definitions with JSON and XML parsing for obscure sources. Built on the same .NET/React base as its siblings, it also earns a place as a search tool in its own right: unified manual search queries every indexer simultaneously at a category level, and you can push multiple releases straight to your download clients without touching Sonarr or Radarr. Health checks and status notifications flag failing indexers, per-indexer statistics track success rates and response times so you can cull unreliable sources, and per-indexer proxy support (SOCKS4/5, HTTP, FlareSolverr) handles trackers behind Cloudflare.

Across peer-to-peer music and file-sharing communities, slskd brings the Soulseek network into any modern web browser through a self-hosted client-server daemon that runs continuously without a desktop GUI. Users can run multiple concurrent network searches, filter results by audio bitrate, file extension, free upload slots, or transfer speed, and queue entire album folders for download in two clicks. The real-time transfer monitor groups active downloads and uploads by peer and directory, allowing you to inspect your live queue position, retry stalled files, or clear completed batches at a glance. For library contributors, the share manager indexes local directories with custom regex exclusion rules and configurable user groups that enforce per-group upload slot allocations, bandwidth caps, and automated leecher blacklists. Built-in social tools let you browse remote user directory trees, auto-join public Soulseek chat rooms on startup, and exchange private messages directly inside the web interface. Multi-server operators can even link a central controller to remote relay agents to distribute file sharing and search workloads across separate machines. When transfers finish or system state changes, event-driven integrations can fire custom HTTP webhooks, execute post-processing shell scripts, upload files via FTP, or expose Prometheus metrics and CIDR-restricted REST API endpoints for external media managers. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Instead of wrestling with raw command-line flags and YAML configuration files for every device on your self-hosted Headscale mesh VPN, Headplane gives you a Tailscale-style web administration console to manage machines, users, DNS records, and access policies from any browser. From the machines overview, network administrators can inspect connected nodes, view Tailnet IPv4 and IPv6 addresses, rename devices, reassign ownership across users, toggle key expiration, and approve advertised subnet routes or exit nodes in a couple of clicks. Built-in Access Control List (ACL) management lets you edit security policies, define user groups, assign node tags, and configure auto-approvers without manually SSHing into your control server. When someone needs immediate shell access to a remote Linux host on the mesh, the integrated WebSSH console opens an interactive terminal session right inside the browser tab over Tailscale SSH. You can also manage MagicDNS settings, configure split DNS nameservers, and add custom DNS records that automatically reload your Headscale instance. Multi-user administration supports OpenID Connect (OIDC) single sign-on with identity providers like Okta, Authentik, Authelia, and Google Workspace, alongside granular role assignments and pre-authentication key generation for unattended server enrollment. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Backed by nearly 30,000 GitHub stars and powering millions of meetings through meet.jit.si, Jitsi Meet is the open-source video conferencing platform that runs entirely in the browser with no plugins or downloads required. The WebRTC-based architecture delivers HD audio and video through the Jitsi Videobridge selective forwarding unit, while Prosody handles XMPP signaling and Jicofo manages conference focus and orechestration. End-to-end encryption uses AES-GCM 128-bit keys exchanged via the Olm protocol, protecting audio, video, and screen sharing through the Insertable Streams API in Chromium-based browsers. Moderators can split participants into breakout rooms with individual password protection, enable lobby waiting rooms for admission control, set meeting passwords, and track speaker statistics with per-participant talk time metrics. Virtual backgrounds leverage TensorFlow.js body segmentation with WebGPU and WebGL acceleration, automatically adapting quality through device tier detection. Server-side recording and YouTube live streaming run through Jibri, while Jigasi provides a SIP gateway for PSTN dial-in and speech-to-text transcription. The platform includes in-meeting chat with private conversations, polls, raise-hand functionality, emoji reactions, and tile and speaker view layouts. Mobile applications for iOS and Android complement the web client, and both web and native SDKs enable embedding video conferences into custom applications. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

The first container registry to reach CNCF graduated status with over 29,000 GitHub stars since VMware open-sourced it in 2016, Harbor transforms the basic Docker Distribution into a hardened enterprise registry with vulnerability scanning, supply chain signing, multi-datacenter replication, and project-level access control out of the box. Trivy scans every pushed image against the NVD, GitHub Advisory Database, and distribution-specific vulnerability feeds, with scan-on-push policies that block deployment of images exceeding configurable severity thresholds. Artifact signing through Cosign keyless signatures and Notation enforces content trust policies ensuring only cryptographically verified images reach production clusters. Policy-based replication synchronizes images and Helm charts between Harbor instances across multiple datacenters using repository, tag, and label filters with automatic retry and bandwidth throttling — enabling hybrid-cloud and disaster-recovery topologies. The RBAC model isolates projects with per-project quotas, robot accounts for CI/CD automation, webhook notifications, and audit logging that tracks every pull, push, delete, and configuration change. LDAP, Active Directory, and OIDC authentication integrate with existing identity providers, while the proxy cache transparently caches images from Docker Hub, Quay, and other upstream registries to reduce pull latency and rate-limit exposure. The RESTful API with embedded Swagger UI, tag retention policies, garbage collection scheduling, and immutable artifact rules complete the lifecycle management. Deploy via Docker Compose or Helm Chart on Kubernetes. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.