A secure drop box for tips and misconduct reports, GlobaLeaks lets organizations, newsrooms, and public institutions receive anonymous submissions and reply to the people behind them. Whistleblowers answer a questionnaire, attach files, and leave with a unique 16-digit receipt that reopens their report later for replies, comments, and the choice of whether and when to reveal their identity. Administrators build the intake form with a questionnaire builder, route reports through channels by topic or department, and host several branded whistleblowing sites from one installation in more than 90 languages. Recipients triage in a searchable inbox with labels, reminders, and customizable case statuses. Analysts, custodians, and administrators get separate roles, and the custodian role can gate access to a reporter's identity. Reports and messages are encrypted, an automatic Tor onion service gives whistleblowers an anonymous way in, two-factor authentication protects staff logins, and PGP secures email notifications. Audit logs track staff actions, and retention rules expire old reports to support GDPR duties and EU Directive 2019/1937 workflows. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Tell an AI agent to deploy your app and watch it actually happen. Nixopus connects to your GitHub repo, analyzes the codebase to detect your framework, generates the right Docker configuration, resolves dependency conflicts, and ships the whole thing to your server with HTTPS enabled. When something breaks, the agent reads the logs, creates a pull request with a fix, and redeploys without waking you up. The chat interface lets you deploy, add custom domains, check logs, roll back, and troubleshoot in plain English from the web dashboard or directly from your VS Code or Cursor editor. Extensions bring one-click installs for 100+ self-hostable apps like Appwrite, Excalidraw, and Ollama, each showing you exactly what it runs on your server before installation. Connect multiple servers and monitor CPU, memory, disk, and running containers across your entire fleet from a single dashboard with draggable widget layouts. The built-in terminal opens SSH sessions right in the browser with split-pane support, so you can watch logs in one pane while running commands in another. Framework detection covers Next.js, Django, Rails, Go, FastAPI, and anything else that fits a container image. Every deployment gets automatic TLS via Caddy with Let's Encrypt certificates provisioned and renewed silently. Previous container images are retained so rollbacks skip the rebuild step entirely. Deploy on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

GrandNode lets you run one shop, a dozen regional storefronts, or a full marketplace from a single installation, with a back office for every role involved. Each store gets its own domain, theme, currencies, languages, and settings, and a store manager panel limits staff to the catalog, orders, and customers of their own store. Outside sellers join through a vendor panel where they manage their own products and orders. The catalog handles attributes and combinations, bundles, grouped items, downloads, date-based reservations, and auctions. B2B selling adds customer groups, tier prices, sales employees, and approvals. Checkout accepts payments through plugins such as Stripe Checkout, Braintree, and cash on delivery, with shipping by fixed rate, weight, or pickup point and tax rules by country, state, or zip code. Marketing tools include coupon codes, discount rules, loyalty points, gift vouchers, customer segments, newsletter campaigns, and push notifications. Clean URLs, sitemaps, and structured data with price and availability help search engines read your products. Pages, blog posts, news, and sliders cover content, and a REST API serves headless storefronts and ERP or CRM integrations. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

CoreObs delivers a unified self-hosted dashboard that replaces the typical combination of Uptime Kuma, Homer, and separate monitoring tools with a single interface for managing your entire server infrastructure. The Next.js frontend with shadcn components provides a modern dark-themed UI displaying server hardware metrics collected by a lightweight Go agent that leverages Glances for hardware abstraction — streaming real-time per-core CPU load, RAM utilization, NVIDIA GPU statistics, disk usage, system uptime, and load averages via WebSocket connections. The application registry tracks all self-hosted services with configurable uptime monitoring, availability history charts, and instant notifications through Discord, Telegram, Pushover, and email when services go down or recover. Quick-access links provide one-click navigation to each application's management panel directly from the dashboard. The network visualization module built on React Flow enables creating visual topology maps of your infrastructure with drag-and-drop nodes representing servers, switches, and services connected by labeled edges. Server data can be organized with tags, copied between entries, and monitored with configurable pagination and compact view modes. Deploy via Docker Compose with three containers — the Next.js web interface, the Go monitoring agent, and PostgreSQL 17 for persistent storage. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Shipping commercial software to customer-managed infrastructure demands a reliable distribution hub, and Distr provides that control plane for vendors who sell into VPCs, on-prem data centers, and air-gapped networks. Vendors define Docker Compose, Docker Swarm, or Helm applications with versions and configuration templates, then roll releases out to every customer deployment from a single vendor portal. Prebuilt deployment controllers installed in customer environments apply updates and report status, container logs, live host metrics, and alerts back, so support teams can diagnose problems without touching anyone's infrastructure. Customers get a white-labeled portal with your branding, install instructions, registry credentials, version management, and customer-initiated support bundles. A built-in OCI registry distributes Docker images, Helm charts, Zarf packages, and other artifacts with per-customer tag access, pull-through caching, and download analytics showing which customer pulls which version. Entitlements control which application versions each customer may deploy, and Ed25519-signed JWT license keys let your own software verify usage limits offline, which keeps licensing working in air-gapped sites. An OpenTofu controller provisions and reconciles BYOC cloud infrastructure, while a REST API and SDK automate onboarding, releases, and entitlements from CI pipelines. Role-based access control manages permissions across vendor and customer organizations, while the Kubernetes compatibility matrix and vulnerability scanning help validate releases before they ship. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

With DSpace, a library or research office can give every thesis, journal article, and dataset its own permanent web address, a searchable metadata record, and files visitors download from the archive. Content sits in a tree of communities and collections, and each collection decides who may deposit and how many review steps follow; reviewers accept a submission or reject it with a note that sends it back to the author. Embargoes hold files back until a set date, access policies limit other files to chosen groups, and sign-in works through LDAP, Shibboleth, SAML, OpenID Connect, or ORCID. Search covers metadata and the extracted full text of uploaded files, facets narrow the results, and browse pages sort by title, issue date, author, or subject. Editors can correct a published item through the submission form. Administrators inspect an audit trail and rewrite homepage news from an admin form. Entity types for people, organizations, projects, journals, and datasets link each publication to the work behind it, and DOIs can be registered through Crossref. Optional settings let authors keep an email address private on their researcher profile and download their own restricted files. Usage reports count visits, downloads, and top countries per item. REST, OAI-PMH, SWORD, and Google Scholar metadata connect the archive to harvesters, deposit tools, and search engines. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-3-Clause licensed.

Frappe Insights delivers a self-hosted business intelligence platform where non-technical users build complex analytical queries without writing SQL. The visual query builder uses Ibis under the hood to compose optimized SQL from drag-and-drop column selections, filters, aggregations, and group-by operations — translating point-and-click interactions into performant database queries across MySQL, PostgreSQL, DuckDB, and BigQuery. The join editor provides a graphical interface for defining multi-table relationships, letting analysts connect data across schemas without understanding foreign keys or join types. The chart builder renders interactive visualizations using Apache eCharts with support for bar, line, area, pie, scatter, funnel, and pivot table chart types — each configurable with axes, colors, legends, and formatting options. Dashboards combine multiple charts into shareable views with layout customization, auto-refresh intervals, and filter propagation across widgets. Data source management handles connection pooling across multiple databases simultaneously, enabling cross-database analysis in single queries. Server scripts extend query capabilities with custom Python transformations for complex business logic that visual tools cannot express. Built on the Frappe Framework's full-stack architecture, deployment uses Docker via the official easy-install script that provisions the complete stack including MariaDB, Redis, and Nginx. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

By routing file transfers directly between client browsers and S3-compatible object storage through time-limited presigned URLs, Safebucket enables organizations to share large files and folders without bottlenecking their application server. Teams organize documents into logical buckets with nested folder hierarchies, preview images, videos, audio tracks, and PDFs inside a sandboxed browser viewer, or bundle up to one hundred selected items into a single client-side ZIP download. Public Quick Share links let external recipients download files or entire folders from a browser or via command-line curl redirects, while Reverse Share turns any shared folder into a secure dropbox where guests can upload files back under size and count quotas. Every shared link supports optional password protection, expiration dates, and maximum view limits, complemented by per-file expiration timers and a soft-delete trash bin with configurable retention. Two-tier role-based access control pairs platform roles (Admin, User, and Guest) with bucket-level permissions (Owner, Contributor, and Viewer), allowing teams to invite external collaborators via challenge-verified email links. Authentication integrates with OpenID Connect identity providers and LDAP or Active Directory servers alongside TOTP multi-factor authentication. Administrators gain a four-view governance console covering platform storage metrics, user and bucket inventories, and searchable audit trails filtered by action, user, and date range. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

WordPress without Gutenberg: ClassicPress, the community-led fork, keeps the TinyMCE classic editor as the default and strips the block editor and Full Site Editing out of core entirely. The result is roughly half WordPress's size - obsolete libraries like jQueryUI, Thickbox, and Flash support are gone, replaced by native HTML5 elements and modern alternatives like SortableJS - which translates to a measurably faster admin and a leaner attack surface. Forked from WordPress 6.2, it remains compatible with the vast plugin and theme ecosystem targeting that lineage (anything not requiring blocks generally works, helped by a blocks-compatibility mode), and the PHP-first WordPress API developers have used for over a decade works unchanged - no React required to extend your CMS. The fork adds its own improvements: built-in media categories and tags with bulk editing, revision management that lets you prune database bloat, native HTML5 dialogs for accessible touch-friendly menus, and recent releases bring APCu object-cache support, vanilla-JS core widgets, and performant translations. Governance is democratic and community-driven rather than corporate. For content sites, business sites, and blogs where the classic editing workflow is the feature, ClassicPress is stability as a philosophy.

Every time a commercial book-tracking platform changes its terms or shuts down, years of reading notes and carefully curated wishlists risk getting lost in messy spreadsheet migrations; Jelu puts your entire reading life under your own control as a self-hosted personal Goodreads alternative. Readers log books as currently reading, finished, or dropped, track page progress and dated reading events, and organize titles across unlimited custom shelves using flexible tags. Adding new books takes seconds through mobile camera ISBN barcode scanning, EPUB and OPF metadata extraction, or automated online searches that query Calibre metadata plugins and fallback book providers for covers, summaries, and publisher identifiers. Migrating existing libraries is effortless with bulk imports for Goodreads CSV exports and plain-text ISBN lists alongside one-click CSV data exports. Author pages automatically pull biographies from Wikipedia and include a deduplication tool to merge duplicate author records created during bulk imports. Household and book-club members can sign in via local accounts, LDAP, or reverse-proxy authentication to share book ratings, write public or instance-wide reviews, inspect yearly and monthly reading statistics, and generate HTML or Markdown embed snippets for personal blogs and digital journals. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Wag is an authentication gateway for WireGuard that lets each device reach only the routes it should, and asks for a second factor before the sensitive ones open. Admins write access policies for everyone, groups, or single users, marking subnets, hosts, ports, and protocols as MFA-required, always allowed, or denied, and the most specific prefix wins, so one allowed address can sit inside a protected range. Devices join with a registration token, and the public endpoint answers with a finished WireGuard profile. Users then confirm a TOTP code, a WebAuthn security key, an OIDC single sign-on login that maps identity provider groups into Wag groups, or a PAM prompt, and repeated failures lock the account. Session lifetime and idle timeouts decide when they must prove themselves again. The browser portal lists users, devices, rules, registration tokens, and webhooks with real-time notifications, while a command line locks devices, resets MFA, and manages administrators. Webhooks turn JSON from an HR or identity system into new tokens or removed users and devices, and clients can fetch the list of guarded routes from a small API. Remote staff, contractors limited to one host, and homelabs are typical uses. When a server fails, the VPN remains reachable through clustering with witness nodes or an external etcd, and certificates arrive through ACME with HTTP-01 or Cloudflare DNS-01. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-3-Clause licensed.

For avid readers who want to catalog their home bookshelves and track annual reading progress without handing personal habits to commercial social networks, BookLogr delivers a self-hosted personal library and reading tracker that replaces Goodreads and The StoryGraph. Searching by title, ISBN-10, or ISBN-13 pulls book covers, author names, page counts, and descriptions directly from OpenLibrary, while manual entry and user-defined custom fields let you record text, numbers, dates, selections, or boolean attributes for rare and indie editions. Configurable library tabs organize titles across Reading, To Be Read, Already Read, Did Not Finish, and All views with instant author filtering. As you read, you can update your current page number or completion percentage, log start and finish dates across multiple re-reads, and rate completed books on a granular 0.5 to 5.0 star scale. Readers can capture page-linked notes and favorite quotes, keeping reflections private or publishing them to a dedicated Notes and Quotes feed on a shareable public profile. Automated Mastodon integration posts reading milestones to the fediverse, while OpenID Connect single sign-on and single-user mode adapt the workspace for households or solo collectors. Built-in Goodreads CSV import and one-click exports to CSV, JSON, and HTML guarantee complete data portability. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Wiki-Go turns a folder of Markdown files into a searchable team wiki with page history, comments, and access rules, and never asks you to run a database. Pages live in a nested tree with a sidebar and breadcrumbs, and an editor with a preview toggle handles emoji shortcodes, highlighted code, LaTeX math, Mermaid diagrams, collapsible sections, GitHub-style alerts, and embedded YouTube, Vimeo, or MP4 video. Full-text search supports exact phrases in quotes and term inclusion or exclusion, and highlights each match. Each save keeps a revision, up to a configurable limit, and any stored version can be restored later. Attachments such as PDFs, spreadsheets, images, and archives sit beside the page they belong to. Drop a Kanban board into any document for drag-and-drop task tracking with nested tasks, or build a categorized link library that fills in page metadata automatically. Signed-in users comment in Markdown, and admins can remove comments. Admin, editor, and viewer roles, user groups, path-based public or private rules, and an optional private-wiki mode decide who sees what. Branding comes from a custom logo, banner, and favicon, shortcodes such as stats insert live site statistics, and readers can switch between dark and light themes or print any page. A REST API opens content to scripts, and a community tool imports Notion exports. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

When Clarkson, the once-popular fuel logger, stopped receiving updates, Hammond stepped in as its logical successor - a self-hosted vehicle expense tracker. Written in Go with a Vue.js interface and SQLite storage - a single lightweight container, no external database - it tracks every cost your vehicles generate: fuel fill-ups with cost, volume, and odometer readings; maintenance and repairs; and arbitrary other expenses, each attachable with photos and documents stored against the vehicle. The multi-user, multi-vehicle design is what sets it apart from phone apps: a household or small business adds all its vehicles and all its drivers, shares vehicles across users, and every fill-up lands in one ledger no matter who was driving. The Quick Entries feature respects how expenses actually happen - snap a photo of the receipt or pump screen at the gas station, then complete the structured entry later when you have a minute. Reporting works at both the vehicle level (cost per distance, fuel economy trends) and across the whole fleet. Migration matters here: importers for Clarkson, Fuelly, and Drivvo bring years of fill-up history along, so switching does not mean starting your data over.

Podcast enthusiasts and homelab archivers automate digital episode preservation and stream personal audio feeds using PodFetch, an open-source self-hosted podcast manager that combines scheduled RSS downloads, Podcasting 2.0 transcript indexing, and browser playback into a modern listening platform. Listeners can subscribe to international podcast channels through direct feed URLs, Apple Podcasts directory searches, or bulk OPML subscription imports, configuring background polling timers to download new releases automatically upon publication. The integrated audio player supports variable speed playback, episode bookmarks, listening histories, and fullscreen visualization modes directly inside responsive desktop and mobile browser sessions. Advanced search capabilities leverage Podcasting 2.0 synchronized transcripts and automated speech-to-text generation via OpenAI-compatible Whisper APIs, allowing collectors to run full-text keyword searches across every spoken phrase in their audio archive. Built-in GPodder API synchronization maintains subscription lists and playback positions across popular smartphone apps like AntennaPod and native companion clients without relying on commercial cloud accounts. Server operators can assign multi-user accounts with private favorites lists, export customized RSS aggregation streams, and route storage paths between fast solid-state drives and large secondary mechanical hard disks. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Turning chaotic group brainstorming sessions into structured visual diagrams, TeamMapper provides a real-time collaborative mind mapping workspace that teams and classrooms can join instantly without creating user accounts. Workshop facilitators, teachers, and product squads start from a central root topic and branch outward into hierarchical radial trees, using keyboard shortcuts and full undo-redo history to capture ideas at the speed of conversation. Every node can be styled with custom branch and background colors, adjustable font weights and sizes, external reference links, uploaded raster images, and visual pictograms from the ARASAAC library to reinforce memory and visual association. Sharing a live session takes a single click: hosts distribute either a view-only link, a full modification invite URL, or a scannable QR code so remote colleagues and students in the same room can edit branches simultaneously. When enabled by the administrator, an integrated AI assistant can automatically generate initial mind map branches and subtopics from a text prompt to jump-start planning sessions. Completed maps export cleanly to JSON, Mermaid diagram syntax, scalable SVG vectors, high-resolution PNG images, or printable PDF documents, and existing JSON maps can be re-imported at any time for follow-up workshops. Built-in privacy controls automatically purge inactive mind maps and orphaned image attachments after a configurable retention window, simplifying GDPR compliance for schools and enterprises. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

neTV turns any Xtream Codes or M3U IPTV subscription into a clean, fast player that you host yourself and open from a browser, iPhone, iPad, Apple TV, Mac, or Chromecast. The EPG grid guide shows what is on now and next, and catchup lets you browse earlier listings, replay a program from the beginning, or start over a show already airing, with timeline seeking whenever your provider keeps an archive. Intelligent Handoff lets you switch off the living room TV mid-match and resume on your phone from the exact moment you stopped, because the server keeps the stream going until the program ends. Movies and series arrive with metadata, seasons, episodes, and resume points, while search accepts regular expressions and favorites support drag-and-drop ordering alongside playlists that you build on the web and see in every app. Smart passthrough remuxes h264 and AAC streams without re-encoding, and NVENC or VAAPI hardware transcoding serves low-latency HLS to clients that need it. Owners of an NVIDIA GPU can switch on real-time 4K AI upscaling that lifts 1080p channels above 70 frames per second on an RTX 5090. A separate gateway port exposes your live sources as an Xtream-compatible endpoint for other native players, with per-user source access and stream limits. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Stop losing money to forgotten paper gift cards and expired retail coupons by centralizing every voucher, loyalty barcode, and store credit inside VoucherVault, a self-hosted digital wallet accessible from any browser or mobile device. Point your phone camera at physical cards during item creation to scan 1D barcodes and 2D QR codes with automatic format detection, or upload original PDF receipts and image attachments directly to each entry. At the checkout register, pull up high-contrast QR codes and scannable barcodes instantly, even inside underground stores without cellular reception thanks to the manual 48-hour offline caching mode. Gift card balances update automatically as you log individual partial redemptions in the per-item transaction ledger. Configurable Apprise notification rules alert you 30 days and 7 days before any voucher expires across Telegram, Discord, Gotify, Ntfy, or email. Households and teams can share specific cards between accounts while keeping personal items private, and administrators can enable OpenID Connect single sign-on for frictionless login. Multi-currency conversion automatically calculates portfolio totals across international vouchers. A built-in REST API endpoint even exposes live portfolio counts and value statistics directly to Home Assistant dashboards. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.