Unkey is the open-source platform that unifies API key management, rate limiting, deployment, and observability into a single control plane. The Go API service validates keys with sub-millisecond latency using regional Redis caches and MySQL 8.0 persistent storage, while ClickHouse captures every verification event for per-key and per-keyspace analytics with filterable time-series charts, request counters, and active key tracking. Keyspaces organize API keys by product, environment, or tier, each configurable with custom prefixes, byte lengths, IP whitelists, encrypted key recovery, and delete protection. Per-key settings include expiration dates, rate limit quotas with configurable windows, RBAC roles and permissions, owner identities linking multiple keys to a single user or organization, and key rotation with grace periods from immediate revocation through 24-hour overlap. The deployment pipeline connects GitHub repositories for automatic Docker container builds, generates preview environments per commit, promotes tested versions to production, and validates releases with OpenAPI diff detection flagging breaking changes before production. The edge gateway authenticates and rate-limits requests at the closest region before routing to the nearest API instance. Immutable audit logs track every key creation, verification, deletion, and configuration change with actor, timestamp, and event metadata. The CLI provides terminal access to key management, analytics queries, and deployment operations. On RepoCloud, deploy Unkey on a dedicated VPS with Docker, root SSH access, and complete control over your API infrastructure, all under the AGPL license.

If editors should publish without waiting on developers, and developers should keep full control of the design, Umbraco is the free content management system built around that split. A page begins in the Block Grid editor, where reusable blocks nest inside Areas and each block is sized on a column and row grid. Live preview shows the result before anything goes out. Publish and unpublish times can be scheduled in the editor's own time zone, and any page can roll back to an earlier version from its Info tab. One content node can exist in several languages, and split view puts two of them side by side. The Media section holds images, video, and other files. Visitors can register and log in as members, new members can be placed in member groups, and pages can be hidden from anyone not logged in. On the code side, templates and partial views shape the front end, while the opt-in Content Delivery API returns content items as JSON for mobile apps and any other front end. Webhooks notify outside services when content is published, unpublished, or deleted. Custom dashboards and property editors extend the backoffice, and the Marketplace lists open-source and commercial packages for the rest. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Point OBS or a hardware encoder at Restreamer's built-in RTMP or SRT ingest and it serves your website while rebroadcasting to YouTube Live, Twitch, Facebook, Vimeo, TikTok, LinkedIn, PeerTube, and anything else that accepts RTMP, SRT, or HLS - a complete self-hosted live-streaming server from datarhei. That multistreaming normally costs a monthly Restream.io subscription; here it's one FFmpeg process per destination on your own hardware. The web UI is genuinely approachable, with a wizard that walks beginners through camera setup, while professionals get the full surface: multiple audio/video inputs (USB, RTSP network cameras, virtual devices), codec and processing settings, separate audio muxing, and hardware acceleration via Nvidia CUDA, Intel VAAPI, or Raspberry Pi. Serving your own audience is first-class - a built-in Video.js player embeds in your site, a ready-made publication website streams without any embedding work, HLS chunk sizes are tunable, and automatic Let's Encrypt handles HTTPS. Viewer and bandwidth monitoring with limits keeps traffic costs predictable, and it's GDPR-friendly: no third-party provider, no audience data stored. A fully Swagger-documented REST API drives automation. SRT support keeps latency under a second.

With 4,300+ GitHub stars and native mobile apps on three platforms, Black Candy transforms any VPS into a private Spotify-style streaming service for your personal music collection. The Ruby on Rails 7 backend with Hotwire Turbo and Stimulus delivers a responsive single-page-feeling web player supporting album browsing, artist views, playlists, favorites, and queue management without full page reloads. Point it at a media directory containing MP3, FLAC, OGG, AAC, or WAV files and Black Candy indexes metadata, fetches album artwork from Discogs API, and begins streaming immediately with on-the-fly transcoding that adapts bitrate to client bandwidth. Multi-user support gives each account independent playlists, favorites, and listening history while sharing the same music library — ideal for families or shared households. Native iOS, Android, and F-Droid apps maintained as separate repositories provide offline caching, background playback, and server discovery for mobile listening. The admin panel manages user accounts, configures media paths, and sets Discogs API tokens for automatic cover art retrieval. Deployment requires one Docker command — `docker run -p 80:80 ghcr.io/blackcandy-org/blackcandy:latest` — with persistent storage volumes for the SQLite database and media directory. For larger deployments, switch to PostgreSQL via environment variables with dedicated database URLs for ActionCable, SolidQueue, and SolidCache. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Provisioning, scaling, and maintaining production-grade PostgreSQL clusters becomes completely automated with Autobase, an internal database-as-a-service control plane. Through a unified web console, database administrators provision multi-node replication topologies, execute non-disruptive minor version updates, and orchestrate automated failovers without manual intervention. Operators can configure continuous physical backups and point-in-time recovery to S3-compatible object storage, ensuring resilient disaster recovery for mission-critical workloads. The integrated dashboard provides granular visibility into cluster topology, replication lag, connection pool saturation, and query throughput across primary and replica instances. Teams can scale read capacity on demand by provisioning dedicated read replicas and load-balanced query endpoints managed by intelligent routing layers. Comprehensive backup verification routines run scheduled restore rehearsals to confirm data integrity before emergencies occur. Automated maintenance playbooks handle index reindexing, vacuum scheduling, and parameter tuning without requiring custom shell scripts. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

SurveyKing combines survey creation and online examination in a single platform — generate complete questionnaires from plain English via built-in LLM integration, administer timed exams with anti-cheating proctoring, and collect structured data through 20+ question types including matrix questions, cascading selectors, file uploads, and electronic signatures. Built on Spring Boot 3 with a React and TypeScript frontend using the UMI framework and Ant Design components, version 1.12 delivers each question type with independent validation rules, data type controls, and formula calculations. The AI engine connects to mainstream LLMs for survey generation from natural language prompts and provides real-time answer explanations during practice sessions. Exam mode features item banks with Word and Excel bulk import, fixed and randomized question selection, composite paper assembly, live proctoring dashboards with anti-cheating controls, automatic and manual grading with per-question scoring, and PDF score report archiving. The visual logic designer and DSL expression engine handle show/hide conditions, required rules, skip branching, quota controls, randomization, and cross-tabulation analysis with SPSS export. Role-based access controls support multi-user collaboration with department and permission management via Spring Security and JWT authentication. Redis handles caching and queuing while MyBatis Plus manages database operations. Deploy via a single Docker command with embedded H2 for trials or Docker Compose with MySQL for production. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

For developers who want a complete visual backend without stitching together separate database, auth, and storage services, Bknd delivers an all-in-one self-hosted Backend-as-a-Service platform with a built-in administrative dashboard. Data schemas evolve visually. Authentication strategies plug in cleanly. Media uploads route straight to object storage. Inside the interactive Admin UI, you can create relational entities, define field validation rules, inspect records, and test generated REST and OpenAPI endpoints on the fly. User management comes ready out of the box with configurable password and OAuth authentication flows, role-based access permissions, and row-level security policies for multi-tenant SaaS products. A unified media manager connects local filesystems, S3 buckets, Cloudflare R2, MinIO, or Cloudinary so applications can handle user avatars, document attachments, and galleries without custom upload pipelines. Visual workflow automation lets you chain triggers, HTTP tasks, and data mutations into repeatable backend flows, while an integrated Model Context Protocol server allows AI agents to query and manage application state directly. You can operate entirely through the visual dashboard, lock down production schemas in code-only or hybrid modes, and connect frontend interfaces using pre-configured login and upload elements. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Preventing silent link rot across research libraries, LinkAce captures, indexes, and permanently archives web discoveries into searchable multi-user collections with automated Wayback Machine snapshots. Curators bookmark articles, documentation, tools, and media using custom browser bookmarklets or quick-add input fields that automatically scrape page titles and metadata descriptions. The built-in link monitor continuously checks saved endpoints for HTTP status anomalies, alerting curators whenever destinations move, throw server errors, or vanish from the live internet. For long-term preservation, the system dispatches automated backup requests to the Internet Archive Wayback Machine to capture historical copies of critical research material. Curators organize their library using nested lists and granular tag hierarchies, switching seamlessly between compact tables, detailed reading feeds, and visual card layouts. Teams and households can create separate user accounts to collaborate on shared collections, delegating read-only or editing privileges per list. The platform also generates individualized RSS feeds for public or private bookmark streams, synchronizes external data through a tokenized REST API, and dispatches automated database dumps to AWS S3 storage buckets. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

With 3,100+ GitHub stars, CyberScraper 2077 replaces brittle CSS selectors and XPath queries with natural language data extraction powered by Large Language Models. Users paste a URL, describe the data they want in plain English, and the AI extracts structured results from any website — no HTML parsing knowledge required. The tool supports three LLM backends: OpenAI GPT models for maximum accuracy, Google Gemini for cost-effective extraction, and local Ollama instances for fully private scraping where URLs and data never leave your server. Built on Python asyncio with Playwright browser automation, it handles concurrent page fetching with content-based and query-based LRU caching to minimize redundant API calls. The Streamlit web interface runs on port 8501 and provides one-click export to JSON, CSV, HTML, SQL, Excel, and direct Google Sheets upload. Tor network integration routes requests through onion routing for anonymous scraping of both clearnet and .onion hidden service sites with automatic circuit management and stream isolation. Stealth mode randomizes user agents, manages cookies, and controls JavaScript execution timing to bypass bot detection systems. Multi-page scraping navigates through paginated results with automatic URL pattern detection. Docker deployment packages all dependencies including Playwright browsers into a single container. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Holding internet service providers accountable for promised bandwidth requires continuous, automated measurement, and MySpeed turns any server into an always-on connection performance analyzer that tracks download speeds, upload throughput, ping latency, and jitter around the clock. Instead of running manual browser tests only when video calls stutter, you can schedule recurring speed checks using custom Cron expressions and switch freely between Ookla, LibreSpeed, and Cloudflare testing servers to verify routing performance across different upstream networks. Interactive statistics views render gradient speed timelines, ping and jitter graphs, hourly performance breakdowns that expose peak-hour congestion, and standard deviation consistency charts, using smart 300-bucket downsampling so multi-month histories load instantaneously. Failed tests are flagged with visual markers on the timeline, while built-in health checks dispatch instant alerts to Discord, Telegram, Signal, WhatsApp, Gotify, email, or custom webhooks whenever bandwidth drops below your target thresholds or outages occur. Administrators can link multiple remote MySpeed instances into a single dashboard to compare bandwidth across branch offices, pause scheduled runs during heavy file transfers, export historical logs, and scrape real-time telemetry into Prometheus and Grafana. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Host your own email, files, calendars, and passwords on a single server with YunoHost, a server operating system that puts every app behind one web admin and one shared login. Browse a catalog of more than 500 apps, such as Nextcloud, WordPress, and Vaultwarden, filter by quality level, and install in a few clicks, or paste a Git URL for a custom app. Each person signs in once at a portal that shows a tile for every app they may open, and apps with single sign-on skip their own login screen. Groups and per-app permissions control access, including public access for visitors, and the Admins group adds web admin, SSH, and sudo. A full mail stack handles incoming and outgoing email per domain with DKIM signing, and Let's Encrypt certificates renew automatically. The domain screen suggests the DNS records you need and can push them to a supported registrar's API, while free .nohost.me, .noho.st, and .ynh.fr subdomains configure themselves. Backups bundle system settings, mail data, and chosen apps into downloadable archives that can be restored selectively from the admin or the command line. Twice a day a built-in diagnosis checks DNS records, mail setup, and system resources, then emails the admins if anything needs attention, with a firewall editor and fail2ban protection alongside. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

When an alert fires on any of your Prometheus Alertmanagers, Karma shows it once, on one filterable dashboard, and lets you acknowledge or silence it from there. Identical alerts from different servers merge into one entry tagged with every server that saw it, HA pairs included. Groups follow the group_by settings of your Alertmanager routes, and shared labels and annotations collapse into a footer. Multi-grid mode gives each value of a label, or each Alertmanager, cluster, or receiver, its own grid, keeping production and staging apart. Configurable label colors make hosts and severities easy to spot. Optional history draws 24 hourly blocks per group from the Prometheus servers that fired it, and an inhibited alert's muted button lists whatever is suppressing it. One click acknowledges an alert with a short-lived silence, and the separate kthxbye daemon can keep extending it until the alert resolves. The silence modal creates, edits, and expires silences, and ticket IDs in comments can become links. A Dead Man's Switch check raises a visible error when the alerting pipeline goes quiet. Basic auth or a proxy's header identifies each user, silence ACLs stop one team from silencing another's alerts, and read-only mode disables silence management. Default filters open the view your team triages first, and light and dark themes follow the browser. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Open Agent Builder delivers a visual canvas for orchestrating AI agent workflows without writing Python scripts or managing complex codebases. The React Flow-powered drag-and-drop interface supports seven node types — Agent, Scraper, Transform, If/Else, Loop, User Approval, and MCP Tool — each configurable with provider-specific settings for Anthropic Claude (Haiku 4.5 and Sonnet 4.5), OpenAI GPT-5, Groq, or any OpenAI-compatible endpoint. The LangGraph orchestration engine handles state management, conditional routing, and human-in-the-loop approval gates while Firecrawl integration converts any website into structured, LLM-ready data through scrape, crawl, and map operations. E2B sandboxed code execution powers Transform nodes for secure data manipulation without risking host system integrity. Real-time streaming updates show execution progress node-by-node as workflows run, with Convex providing reactive database synchronization for workflow state and execution history. The TypeScript-first architecture (96.8% TypeScript) built on Next.js 16 App Router with Tailwind CSS delivers a responsive interface across devices. Clerk handles multi-user authentication with JWT integration for secure workspace isolation. Deploy via npm install and environment configuration with Firecrawl, Convex, and Clerk API keys. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Combining Docker container labels with a live web control plane, DockFlare automates Cloudflare Tunnel ingress routing, multi-zone DNS records, and Zero Trust Access policies across self-hosted infrastructure. DevOps engineers and homelab operators can attach simple container labels to expose HTTP, HTTPS, TCP, SSH, and RDP services publicly in seconds without clicking through external cloud dashboards. For non-containerized workloads such as bare-metal hypervisors or network appliances, administrators can define manual ingress rules, path-based routes, custom TLS SNI headers, and origin certificate bypass flags directly in the web interface. Security teams use reusable Access Groups and wildcard zone policies to enforce Google, GitHub, Azure AD, or custom OIDC authentication across every subdomain from a single policy definition. Distributed deployments connect lightweight remote agents back to the primary controller using Zero Trust service tokens so multi-host clusters share one unified routing view. When containers stop or restart, configurable grace-period timers prevent accidental route churn before cleaning up stale DNS entries, while encrypted state backups protect your entire ingress configuration. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Enterprise documentation discipline without enterprise infrastructure: Documize Community is the Confluence alternative built on exactly that trade. The entire platform - Go backend, Ember.js frontend - compiles to a single executable binary for Linux, Windows, and macOS with zero runtime dependencies: no Elasticsearch, no Redis, no JVM. Point it at PostgreSQL, MySQL, MariaDB, Percona, or Microsoft SQL Server (rare in open source, decisive in Microsoft shops), and schema migrations run on launch with native full-text search on whichever engine you chose. Content organization rejects nested-folder sprawl for Spaces, categories, and labels, and the section-based composable editor mixes rich text, Markdown, code blocks, PDFs, diagrams, and embedded Jira or Trello content in one document, with reusable blocks and templates so teams start from standards rather than blank pages. It deliberately unifies internal team docs and customer-facing documentation in one system with granular space-, document-, and action-level permissions deciding who sees what. Where wikis stop, Documize continues: content approval workflows (draft, review, approve, publish), version management, lifecycle control, feedback capture, PDF export, analytics showing what gets read and ignored, activity streams, and audit logs. Keycloak, LDAP, and SSO integrate for enterprise auth. AGPL-licensed.

Convert paper archives, email attachments, and PDF records into an organized digital repository with Docspell, an open-source document management system that automates optical character recognition, metadata extraction, and full-text search. Users can ingest receipts and invoices through network scanners, monitored IMAP email mailboxes, mobile uploads, or drag-and-drop browser tools. The background processing pipeline executes optical character recognition via Tesseract, enhances image contrast with unpaper, and extracts text from Word documents and PDFs. Machine learning algorithms analyze document syntax to predict correspondents, suggest relevant organization tags, and identify due dates automatically. Team members can search their entire filing cabinet using complex Boolean queries and full-text indexing powered by Apache Solr or PostgreSQL. Administrators can configure multi-user collectives with isolated permissions, define custom metadata attributes, set up webhooks, and share time-limited document download links. Users can also merge multi-page scans, track processing job queues, and export curated document collections for tax filings or legal audits. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GNU AGPL v3.0 licensed.

Fusio turns the data and services you already run into a managed API that partners, apps, and AI agents can actually use. The workflow starts small: add a database connection and a table becomes a REST endpoint, or proxy a remote service and route traffic between internal microservices. Each operation pairs an HTTP path with an action and a schema, so requests are validated and an OpenAPI specification plus client SDKs for major languages come out without extra effort. Custom behavior lives in reusable actions, and an AI assistant can draft actions and schemas from a plain-language prompt. Native Model Context Protocol support then offers those actions to autonomous agents as tools. Third-party developers get a self-service portal with documentation, testing tools, and their own keys. Every endpoint can be protected with scopes and rate limits. Asynchronous work runs through events, webhooks, cronjobs, and triggers. When the API becomes a product, plans, quotas, and transactions handle billing, and analytics follow usage, performance, and errors. A marketplace installs ready-made actions and apps, and the generator and test panels speed up development. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Spreadsheets and old Access databases give way to custom business apps that a team builds itself in a browser with Saltcorn, a no-code database application builder. Tables hold related records with typed and calculated fields, and CSV files import straight into them. Views start from patterns such as list, show, edit, filter, kanban, calendar, gantt, map, and chart, then take shape on a drag-and-drop canvas with a layers tree and desktop, tablet, and mobile previews. A view can embed another view, so clicking a row narrows the others and builds a cross-filtering dashboard with no glue code. Triggers react to row changes, schedules, logins, and API calls, while visual workflows branch, loop, and pause for a person's form before resuming days later. An AI copilot drafts tables, pages, and workflows from a plain-language prompt. The same views also become native Android and iOS apps with offline mode, PDF or image documents, and responsive emails. Every table, view, and page carries a minimum user role, and an auto-generated REST API exposes the data. Packs such as project management and an address book start an app from a ready template. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.