Kuzzle ships a production-ready backend from day one: data storage with Elasticsearch search, real-time pub/sub notifications, user authentication, role-based permissions, and a multi-protocol API serving HTTP, WebSocket, and MQTT simultaneously on port 7512. Rather than rebuilding these standard features from scratch for each project, you get a ready-made backend that accepts connections from web applications, mobile clients, and IoT devices through one unified API surface. Elasticsearch provides persistent document storage with full-text search, geospatial queries, and aggregation pipelines, while Redis handles internal caching and memory storage operations. The Koncorde real-time engine powers pub/sub messaging and database notifications, enabling clients to subscribe to document changes with filter conditions that trigger instant updates when matching data is created, modified, or deleted. User management includes JWT-based authentication, role-based access control with granular permissions at the controller and action level, and pluggable authentication strategies via Passport.js. The extensible plugin framework allows developing custom business logic, additional authentication providers, storage connectors, and protocol handlers. Client SDKs for JavaScript, Dart, Kotlin, and C++ accelerate frontend development, while the Kourou CLI provides command-line API access and project scaffolding. The Vue.js Admin Console offers a web interface for managing indexes, collections, documents, users, profiles, and roles. Horizontal scaling through masterless cluster mode targets 99.99% uptime without single points of failure. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Alf.io handles the complete conference and event lifecycle from ticket distribution through check-in to financial reporting, built for organizers who refuse to surrender attendee data to third-party ticketing platforms like Eventbrite or Tito. Built on Java 17 with Spring Boot and PostgreSQL with row-level security policies, the project has earned over 1,500 GitHub stars from privacy-conscious event organizers across Europe and beyond. Payment processing supports Stripe for credit cards, Mollie for iDEAL, Bancontact, KBC/CBC, and Przelewy24, plus Revolut, PayPal, bank transfers, on-site collection, and configurable custom offline payment methods with localized instructions. Multi-tier ticket categories enable early bird, VIP, standard, and free registrations with promotional codes, group discounts, and waiting lists that automatically notify next-in-queue when cancellations occur. Customizable registration forms collect attendee data beyond standard fields, while EU VAT management validates tax IDs through the VIES web service and supports Italian e-invoicing with automatic PDF invoice generation attached to confirmation emails. The Alf.io Scan mobile app for iOS and Android performs QR code check-in at venue entrances, and the Alf.io-PI project provides Raspberry Pi-powered offline-capable check-in stations that form encrypted clusters for high-throughput badge printing at large events. Apple Wallet integration delivers digital passes via PassKit. The extensions system integrates with CRMs, accounting platforms, Slack, Telegram, and Mailjet. Multi-language support covers nine languages. Deploy via Docker with PostgreSQL. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPLv3 licensed.

A secure drop box for tips and misconduct reports, GlobaLeaks lets organizations, newsrooms, and public institutions receive anonymous submissions and reply to the people behind them. Whistleblowers answer a questionnaire, attach files, and leave with a unique 16-digit receipt that reopens their report later for replies, comments, and the choice of whether and when to reveal their identity. Administrators build the intake form with a questionnaire builder, route reports through channels by topic or department, and host several branded whistleblowing sites from one installation in more than 90 languages. Recipients triage in a searchable inbox with labels, reminders, and customizable case statuses. Analysts, custodians, and administrators get separate roles, and the custodian role can gate access to a reporter's identity. Reports and messages are encrypted, an automatic Tor onion service gives whistleblowers an anonymous way in, two-factor authentication protects staff logins, and PGP secures email notifications. Audit logs track staff actions, and retention rules expire old reports to support GDPR duties and EU Directive 2019/1937 workflows. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Tell an AI agent to deploy your app and watch it actually happen. Nixopus connects to your GitHub repo, analyzes the codebase to detect your framework, generates the right Docker configuration, resolves dependency conflicts, and ships the whole thing to your server with HTTPS enabled. When something breaks, the agent reads the logs, creates a pull request with a fix, and redeploys without waking you up. The chat interface lets you deploy, add custom domains, check logs, roll back, and troubleshoot in plain English from the web dashboard or directly from your VS Code or Cursor editor. Extensions bring one-click installs for 100+ self-hostable apps like Appwrite, Excalidraw, and Ollama, each showing you exactly what it runs on your server before installation. Connect multiple servers and monitor CPU, memory, disk, and running containers across your entire fleet from a single dashboard with draggable widget layouts. The built-in terminal opens SSH sessions right in the browser with split-pane support, so you can watch logs in one pane while running commands in another. Framework detection covers Next.js, Django, Rails, Go, FastAPI, and anything else that fits a container image. Every deployment gets automatic TLS via Caddy with Let's Encrypt certificates provisioned and renewed silently. Previous container images are retained so rollbacks skip the rebuild step entirely. Deploy on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

GrandNode lets you run one shop, a dozen regional storefronts, or a full marketplace from a single installation, with a back office for every role involved. Each store gets its own domain, theme, currencies, languages, and settings, and a store manager panel limits staff to the catalog, orders, and customers of their own store. Outside sellers join through a vendor panel where they manage their own products and orders. The catalog handles attributes and combinations, bundles, grouped items, downloads, date-based reservations, and auctions. B2B selling adds customer groups, tier prices, sales employees, and approvals. Checkout accepts payments through plugins such as Stripe Checkout, Braintree, and cash on delivery, with shipping by fixed rate, weight, or pickup point and tax rules by country, state, or zip code. Marketing tools include coupon codes, discount rules, loyalty points, gift vouchers, customer segments, newsletter campaigns, and push notifications. Clean URLs, sitemaps, and structured data with price and availability help search engines read your products. Pages, blog posts, news, and sliders cover content, and a REST API serves headless storefronts and ERP or CRM integrations. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

CoreObs delivers a unified self-hosted dashboard that replaces the typical combination of Uptime Kuma, Homer, and separate monitoring tools with a single interface for managing your entire server infrastructure. The Next.js frontend with shadcn components provides a modern dark-themed UI displaying server hardware metrics collected by a lightweight Go agent that leverages Glances for hardware abstraction — streaming real-time per-core CPU load, RAM utilization, NVIDIA GPU statistics, disk usage, system uptime, and load averages via WebSocket connections. The application registry tracks all self-hosted services with configurable uptime monitoring, availability history charts, and instant notifications through Discord, Telegram, Pushover, and email when services go down or recover. Quick-access links provide one-click navigation to each application's management panel directly from the dashboard. The network visualization module built on React Flow enables creating visual topology maps of your infrastructure with drag-and-drop nodes representing servers, switches, and services connected by labeled edges. Server data can be organized with tags, copied between entries, and monitored with configurable pagination and compact view modes. Deploy via Docker Compose with three containers — the Next.js web interface, the Go monitoring agent, and PostgreSQL 17 for persistent storage. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Shipping commercial software to customer-managed infrastructure demands a reliable distribution hub, and Distr provides that control plane for vendors who sell into VPCs, on-prem data centers, and air-gapped networks. Vendors define Docker Compose, Docker Swarm, or Helm applications with versions and configuration templates, then roll releases out to every customer deployment from a single vendor portal. Prebuilt deployment controllers installed in customer environments apply updates and report status, container logs, live host metrics, and alerts back, so support teams can diagnose problems without touching anyone's infrastructure. Customers get a white-labeled portal with your branding, install instructions, registry credentials, version management, and customer-initiated support bundles. A built-in OCI registry distributes Docker images, Helm charts, Zarf packages, and other artifacts with per-customer tag access, pull-through caching, and download analytics showing which customer pulls which version. Entitlements control which application versions each customer may deploy, and Ed25519-signed JWT license keys let your own software verify usage limits offline, which keeps licensing working in air-gapped sites. An OpenTofu controller provisions and reconciles BYOC cloud infrastructure, while a REST API and SDK automate onboarding, releases, and entitlements from CI pipelines. Role-based access control manages permissions across vendor and customer organizations, while the Kubernetes compatibility matrix and vulnerability scanning help validate releases before they ship. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Cyclists, runners, hikers, and kayakers can log every GPS route in FitTrackee, a workout tracker where each workout stays private until shared. Upload a GPX, FIT, KML, KMZ, or TCX file and the workout appears with a map and charts. Zip archives and manual entry work too. Charts plot speed or pace, elevation, heart rate, cadence, and power on one graph or several. Each workout holds 20 photos at most, and photos with GPS coordinates appear on the map. Twenty-seven sports are available, including cycling, running, kayaking, and swimrun. Shoes, bikes, and boards each tally distance, duration, and workouts, and sports can have default equipment. The dashboard shows a monthly chart and a calendar of workouts and records, and statistics group totals by day, week, month, year, or sport. Filters narrow the workouts list by date, sport, equipment, location and radius, distance, or speed, and results can be mapped. A global map plots workouts, filtered by date and sport. Workout data, charts, map, and photos each get a visibility setting: private, followers only, or public. Follow requests need approval by default, and unwanted users can be blocked. Comments accept limited Markdown, and the five latest public workouts publish as an Atom or RSS feed. Data export bundles an account's workouts and uploaded files. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Every batch a craft business ships carries a recipe version, a cost, and a trail of ingredient lots, and Craftplan, an open-source ERP, keeps all three connected. Receiving stock against a purchase order records each supplier lot code and optional expiry date, and partial deliveries keep the order open. Customer orders appear on a delivery calendar and can generate invoices. Scheduled items wait on the production board as unbatched cards until Batch All creates one batch with a frozen copy of the recipe. Capacity warnings flag products over their daily limit, and a forecast highlights materials that will run short. Finishing a batch consumes ingredient lots earliest-expiry first, skips any lot on hold or rejected, and snapshots material, labor, and overhead costs. Recipes are versioned, so past costs never change. A blend made in-house can be stocked as its own material, with its actual yield, lot costs, and source lots intact. Allergens and nutrition facts roll up from each material through every recipe, and completed batches print A5 or compact labels with a scannable barcode. The Trace Center follows a supplier lot forward to every customer who received it, or a finished batch back to its sources. Recall mode can place the lot on hold, and the trace exports as CSV or prints for the recall file. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

With DSpace, a library or research office can give every thesis, journal article, and dataset its own permanent web address, a searchable metadata record, and files visitors download from the archive. Content sits in a tree of communities and collections, and each collection decides who may deposit and how many review steps follow; reviewers accept a submission or reject it with a note that sends it back to the author. Embargoes hold files back until a set date, access policies limit other files to chosen groups, and sign-in works through LDAP, Shibboleth, SAML, OpenID Connect, or ORCID. Search covers metadata and the extracted full text of uploaded files, facets narrow the results, and browse pages sort by title, issue date, author, or subject. Editors can correct a published item through the submission form. Administrators inspect an audit trail and rewrite homepage news from an admin form. Entity types for people, organizations, projects, journals, and datasets link each publication to the work behind it, and DOIs can be registered through Crossref. Optional settings let authors keep an email address private on their researcher profile and download their own restricted files. Usage reports count visits, downloads, and top countries per item. REST, OAI-PMH, SWORD, and Google Scholar metadata connect the archive to harvesters, deposit tools, and search engines. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-3-Clause licensed.

Frappe Insights delivers a self-hosted business intelligence platform where non-technical users build complex analytical queries without writing SQL. The visual query builder uses Ibis under the hood to compose optimized SQL from drag-and-drop column selections, filters, aggregations, and group-by operations — translating point-and-click interactions into performant database queries across MySQL, PostgreSQL, DuckDB, and BigQuery. The join editor provides a graphical interface for defining multi-table relationships, letting analysts connect data across schemas without understanding foreign keys or join types. The chart builder renders interactive visualizations using Apache eCharts with support for bar, line, area, pie, scatter, funnel, and pivot table chart types — each configurable with axes, colors, legends, and formatting options. Dashboards combine multiple charts into shareable views with layout customization, auto-refresh intervals, and filter propagation across widgets. Data source management handles connection pooling across multiple databases simultaneously, enabling cross-database analysis in single queries. Server scripts extend query capabilities with custom Python transformations for complex business logic that visual tools cannot express. Built on the Frappe Framework's full-stack architecture, deployment uses Docker via the official easy-install script that provisions the complete stack including MariaDB, Redis, and Nginx. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

By routing file transfers directly between client browsers and S3-compatible object storage through time-limited presigned URLs, Safebucket enables organizations to share large files and folders without bottlenecking their application server. Teams organize documents into logical buckets with nested folder hierarchies, preview images, videos, audio tracks, and PDFs inside a sandboxed browser viewer, or bundle up to one hundred selected items into a single client-side ZIP download. Public Quick Share links let external recipients download files or entire folders from a browser or via command-line curl redirects, while Reverse Share turns any shared folder into a secure dropbox where guests can upload files back under size and count quotas. Every shared link supports optional password protection, expiration dates, and maximum view limits, complemented by per-file expiration timers and a soft-delete trash bin with configurable retention. Two-tier role-based access control pairs platform roles (Admin, User, and Guest) with bucket-level permissions (Owner, Contributor, and Viewer), allowing teams to invite external collaborators via challenge-verified email links. Authentication integrates with OpenID Connect identity providers and LDAP or Active Directory servers alongside TOTP multi-factor authentication. Administrators gain a four-view governance console covering platform storage metrics, user and bucket inventories, and searchable audit trails filtered by action, user, and date range. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

WordPress without Gutenberg: ClassicPress, the community-led fork, keeps the TinyMCE classic editor as the default and strips the block editor and Full Site Editing out of core entirely. The result is roughly half WordPress's size - obsolete libraries like jQueryUI, Thickbox, and Flash support are gone, replaced by native HTML5 elements and modern alternatives like SortableJS - which translates to a measurably faster admin and a leaner attack surface. Forked from WordPress 6.2, it remains compatible with the vast plugin and theme ecosystem targeting that lineage (anything not requiring blocks generally works, helped by a blocks-compatibility mode), and the PHP-first WordPress API developers have used for over a decade works unchanged - no React required to extend your CMS. The fork adds its own improvements: built-in media categories and tags with bulk editing, revision management that lets you prune database bloat, native HTML5 dialogs for accessible touch-friendly menus, and recent releases bring APCu object-cache support, vanilla-JS core widgets, and performant translations. Governance is democratic and community-driven rather than corporate. For content sites, business sites, and blogs where the classic editing workflow is the feature, ClassicPress is stability as a philosophy.

The drawing surface inside WebRTC conference tools like Meetzi and the LAMS online-learning platform is Whiteboard (by cracker0dks) - a lightweight Node.js collaborative sketchboard built to be embedded and customized, which also slots into Nextcloud via the External Sites app. Everyone opening the same whiteboardid URL parameter draws on the same board, with remote user cursors visible live, per-user undo/redo, and an indicator showing the smallest participating screen so nobody draws outside a colleague's view. Content handling goes beyond pen strokes: drag-and-drop or paste images and PDFs from any PC or browser, then resize, rotate, and draw over them on canvas or background; add text and sticky notes; hold Shift for angle-snapped lines and perfect squares. Every function has a keybinding - deliberately friendly to pen displays like Wacom and XP-Pen whose hardware buttons map to shortcuts. Boards save to image or JSON (with reload), export directly to Nextcloud via WebDAV, and persist across restarts with the file-database option. A REST API with bundled interactive docs allows full programmatic control, an optional access token locks down uploads, and YAML configuration tunes behavior and performance. MIT-licensed and reverse-proxy friendly.

Every time a commercial book-tracking platform changes its terms or shuts down, years of reading notes and carefully curated wishlists risk getting lost in messy spreadsheet migrations; Jelu puts your entire reading life under your own control as a self-hosted personal Goodreads alternative. Readers log books as currently reading, finished, or dropped, track page progress and dated reading events, and organize titles across unlimited custom shelves using flexible tags. Adding new books takes seconds through mobile camera ISBN barcode scanning, EPUB and OPF metadata extraction, or automated online searches that query Calibre metadata plugins and fallback book providers for covers, summaries, and publisher identifiers. Migrating existing libraries is effortless with bulk imports for Goodreads CSV exports and plain-text ISBN lists alongside one-click CSV data exports. Author pages automatically pull biographies from Wikipedia and include a deduplication tool to merge duplicate author records created during bulk imports. Household and book-club members can sign in via local accounts, LDAP, or reverse-proxy authentication to share book ratings, write public or instance-wide reviews, inspect yearly and monthly reading statistics, and generate HTML or Markdown embed snippets for personal blogs and digital journals. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Wag is an authentication gateway for WireGuard that lets each device reach only the routes it should, and asks for a second factor before the sensitive ones open. Admins write access policies for everyone, groups, or single users, marking subnets, hosts, ports, and protocols as MFA-required, always allowed, or denied, and the most specific prefix wins, so one allowed address can sit inside a protected range. Devices join with a registration token, and the public endpoint answers with a finished WireGuard profile. Users then confirm a TOTP code, a WebAuthn security key, an OIDC single sign-on login that maps identity provider groups into Wag groups, or a PAM prompt, and repeated failures lock the account. Session lifetime and idle timeouts decide when they must prove themselves again. The browser portal lists users, devices, rules, registration tokens, and webhooks with real-time notifications, while a command line locks devices, resets MFA, and manages administrators. Webhooks turn JSON from an HR or identity system into new tokens or removed users and devices, and clients can fetch the list of guarded routes from a small API. Remote staff, contractors limited to one host, and homelabs are typical uses. When a server fails, the VPN remains reachable through clustering with witness nodes or an external etcd, and certificates arrive through ACME with HTTP-01 or Cloudflare DNS-01. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-3-Clause licensed.

For avid readers who want to catalog their home bookshelves and track annual reading progress without handing personal habits to commercial social networks, BookLogr delivers a self-hosted personal library and reading tracker that replaces Goodreads and The StoryGraph. Searching by title, ISBN-10, or ISBN-13 pulls book covers, author names, page counts, and descriptions directly from OpenLibrary, while manual entry and user-defined custom fields let you record text, numbers, dates, selections, or boolean attributes for rare and indie editions. Configurable library tabs organize titles across Reading, To Be Read, Already Read, Did Not Finish, and All views with instant author filtering. As you read, you can update your current page number or completion percentage, log start and finish dates across multiple re-reads, and rate completed books on a granular 0.5 to 5.0 star scale. Readers can capture page-linked notes and favorite quotes, keeping reflections private or publishing them to a dedicated Notes and Quotes feed on a shareable public profile. Automated Mastodon integration posts reading milestones to the fediverse, while OpenID Connect single sign-on and single-user mode adapt the workspace for households or solo collectors. Built-in Goodreads CSV import and one-click exports to CSV, JSON, and HTML guarantee complete data portability. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Wiki-Go turns a folder of Markdown files into a searchable team wiki with page history, comments, and access rules, and never asks you to run a database. Pages live in a nested tree with a sidebar and breadcrumbs, and an editor with a preview toggle handles emoji shortcodes, highlighted code, LaTeX math, Mermaid diagrams, collapsible sections, GitHub-style alerts, and embedded YouTube, Vimeo, or MP4 video. Full-text search supports exact phrases in quotes and term inclusion or exclusion, and highlights each match. Each save keeps a revision, up to a configurable limit, and any stored version can be restored later. Attachments such as PDFs, spreadsheets, images, and archives sit beside the page they belong to. Drop a Kanban board into any document for drag-and-drop task tracking with nested tasks, or build a categorized link library that fills in page metadata automatically. Signed-in users comment in Markdown, and admins can remove comments. Admin, editor, and viewer roles, user groups, path-based public or private rules, and an optional private-wiki mode decide who sees what. Branding comes from a custom logo, banner, and favicon, shortcodes such as stats insert live site statistics, and readers can switch between dark and light themes or print any page. A REST API opens content to scripts, and a community tool imports Notion exports. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.