Built for brands that want AI search engines to quote them, GEOFlow is an open-source admin system that turns approved knowledge into reviewed articles and publishes them across every site you run. Load documents or import trusted web pages into knowledge bases that are chunked into evidence units, with optional semantic planning and vector retrieval. Combine them with title libraries (AI can draft up to 100,000 titles), keywords, images, authors, and prompts, then set a task's generation limits, cadence, and publishing scope. Chat and embedding models connect through OpenAI-compatible endpoints or native Gemini, with automatic fallback to the next model when a call fails. Each draft passes an AI quality gate that checks evidence, citations, advertising rules, and publishing context, records scores with source locations and revision advice, and holds risky articles for a human reviewer. Approved articles appear on the built-in site with SEO metadata, Open Graph, Schema, sitemaps, and llms.txt, or travel to hosted subdomain sites, GEOFlow Agent packages, WordPress through its REST API, or any HTTP endpoint. A manual publishing workbench and Chrome assistant cover platforms that need a person, while analytics track traffic, AI crawlers, and brand visibility in generative engines. An API, command-line tool, and agent skill support automation. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Estimators, planners, and site teams work from one project record in OpenConstructionERP, a self-hosted construction workspace that carries a job from priced bill of quantities through tender, schedule, and site diary. The BOQ editor organizes sections, positions, and reusable assemblies with overhead, profit, VAT, and contingency markups, validates against DIN 276, NRM, and MasterFormat, and exports to PDF, Excel, CSV, or GAEB XML. Pricing draws on 120,000+ cost items across nine cost bases and a 7,000+ resource catalog, with regional price adjustment and semantic search. Quantities come from PDF plans measured on screen or from RVT, IFC, DWG, and DGN models; a 3D viewer filters elements and links them to BOQ positions, clash detection checks federated models, and an AI estimator drafts positions from text, photos, or drawings via the LLM you connect. Gantt schedules show dependencies and critical path, while earned value and S-curves track budget against actual. Tender comparison lines up subcontractor bids, and contracts, variations, and interim payment claims stay tied to the contract sum. On site, daily diaries with health and safety tracking, punch lists, and a carbon module totaling embodied emissions from the BOQ keep field work in the same system. The interface speaks 44 languages with right-to-left support, 293 guided cases teach real workflows on a demo project, and a REST API, webhooks, and module builder extend it. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Trusted by thousands of organizations processing billions of time series data points and backed by 17,000+ GitHub stars, VictoriaMetrics delivers a monitoring and time series database that outperforms Prometheus by 16x on query speed while consuming 2.5x less disk space through its optimized compression and storage engine. The architecture supports both single-node deployments handling 10M+ active time series and a horizontally scalable cluster version with vminsert, vmstorage, and vmselect components providing multi-tenancy, replication, and independent namespace isolation. Data ingestion accepts both push protocols including InfluxDB line protocol, Graphite plaintext, OpenTSDB HTTP, CSV, and OpenTelemetry OTLP alongside pull-based Prometheus scraping and remote write, enabling drop-in replacement of existing monitoring stacks without reconfiguring exporters. MetricsQL extends standard PromQL with additional functions, subqueries, and implicit time range alignment while maintaining full backward compatibility with existing Prometheus alerts and Grafana dashboards. The vmalert component processes recording and alerting rules with Alertmanager integration, while vmbackup and vmrestore enable point-in-time snapshots to S3, GCS, and Azure Blob Storage. Stream aggregation operates as a StatsD alternative for pre-aggregating high-cardinality metrics before storage. NFS-compatible storage backends including Amazon EFS and Google Filestore allow shared persistent volumes across cluster nodes. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

With over 14,000 GitHub stars and a growing global network of security deployments, CrowdSec turns every attack on any participating server into protection for the entire community. The security engine operates as a combined IDS/IPS and WAF, analyzing log sources from Nginx, Apache, SSH, WordPress, and over 50 other services to detect brute force attacks, port scans, web vulnerability exploitation, and credential stuffing in real time. When one server detects a new threat, the attacker's IP is shared through the community blocklist, proactively protecting thousands of other installations before the attacker can reach them. The built-in WAF powered by Coraza v3 inspects HTTP requests at the application layer, validates against OpenAPI schemas, and applies custom rules with flexible AND/OR condition mixing for precise threat detection. Bot detection serves challenge pages with client fingerprinting to distinguish legitimate traffic from automated scrapers and scanners. Remediation components block malicious IPs at multiple infrastructure layers including iptables, nftables, Nginx, HAProxy, Cloudflare, and AWS Security Groups through the detect-here-remedy-there architecture. The scenario-based detection system ships with default rules for common attack patterns and supports custom scenarios written in YAML with an expressive filter language. A centralized console provides real-time visualization of alerts, threat intelligence analysis, and management of multiple distributed security engines. GDPR compliant by design, all log analysis happens locally and raw logs never leave your infrastructure. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

With over 24,000 GitHub stars and a rapidly growing community of self-hosters, authentik delivers enterprise-grade identity management that replaces commercial solutions like Okta and Auth0 with a fully self-hosted platform requiring no per-user licensing fees. The platform serves as a unified identity provider supporting SAML 2.0, OAuth 2.0 and OpenID Connect, LDAP for legacy application compatibility, SCIM 2.0 for automated user provisioning, and RADIUS for network device authentication. The visual flow designer enables administrators to create custom authentication workflows combining password verification, multi-factor authentication with TOTP, WebAuthn, and SMS codes, email verification, captcha challenges, and conditional logic based on user attributes or device context. The forward-auth and reverse proxy integration works seamlessly with Traefik, Nginx, Caddy, and Envoy to protect applications that lack built-in authentication. User enrollment flows support self-registration with configurable approval workflows, invitation links, and automatic group assignment. The LDAP outpost exposes user and group data to legacy applications requiring LDAP bind authentication, while the SCIM provider automates user lifecycle management with downstream applications. Multi-tenancy support through brands allows a single authentik instance to serve multiple organizations with independent domains, branding, and authentication policies. The admin interface provides comprehensive user management, group hierarchy, application catalog, event logging with GeoIP enrichment, and system health monitoring. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Licensed under a source-available license with an open-source community edition.

Merge, split, compress, convert, edit, annotate, redact, OCR, and sign PDFs - BentoPDF packs over 130 tools into a privacy-first toolkit that runs entirely in the browser through WebAssembly. Files are never uploaded - processing happens in browser memory on the user's machine and disappears when the tab closes, which makes the tool GDPR-clean by architecture and safe for financial, legal, and internal documents. The engine combines WASM builds of PyMuPDF, Ghostscript, and CoherentPDF; Tesseract handles OCR with searchable text-layer output; Office conversions cover Word, Excel, and PowerPoint; and digital signatures use X.509 certificates (PFX/PEM) with the private key staying on the client. Because there is no server-side processing, deployment is a static-file exercise: a single Docker container, or any static host. A dedicated self-hosted build strips the marketing pages while keeping every tool, and air-gapped deployments are first-class - an automated script bundles the WASM modules, OCR language data, and fonts for fully offline networks. No accounts, no limits, no watermarks; TypeScript and Vite under the hood.

FileBrowser Quantum is an open-source, self-hosted web file manager that transforms any directory tree or mounted storage volume into a fast, searchable cloud drive accessible from any browser. You can mount multiple independent filesystem sources at once and apply custom include or exclude rules to keep sensitive system folders hidden from everyday browsing. A background indexing engine powers instant as-you-type search across millions of files, letting you filter results by file size, folder size, media type, or modification date in milliseconds. Rich media thumbnails render automatically for videos, office documents, audio album artwork, and interactive 3D models, while integrated OnlyOffice support lets you edit spreadsheets and word processing documents directly inside your browser tab. Built-in WebDAV server support allows desktop operating systems and mobile file apps to mount your remote directories as native network drives. Sharing files with external collaborators takes seconds through customizable public or private links with expiration timers, download limits, password protection, anonymous upload permissions, and custom branding themes. Administrators can authenticate users via OpenID Connect, LDAP, JSON Web Tokens, proxy headers, or local passwords with two-factor authentication, then enforce path-level read, write, and delete rules per user or group. Developers and automation engineers can generate long-lived API tokens and explore the interactive Swagger endpoint to script file transfers and directory provisioning. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

PilotDeck introduces a WorkSpace-first architecture where each project receives its own isolated file system, memory store, and skill set, preventing context bleed between parallel tasks. White-box memory makes generation, extraction, storage, and retrieval fully visible, letting users audit, edit, pin, and rollback individual entries when the agent misremembers, while Dream Mode consolidates memory fragments during idle windows. Smart Routing auto-detects task difficulty and sends complex calls to flagship models like Claude Sonnet or GPT-4o while routing simple requests to lighter models, achieving claimed 70% cost savings through on-device and cloud co-orchestration with TokenSaver tiering and sticky session binding. Always-on background execution keeps agents running after the user closes the browser, with Discovery and Cron-based scheduling for recurring workflows. The platform natively supports the Model Context Protocol for first-class MCP server integration, community skills via ClawHub on npm, lifecycle hooks intercepting PreToolUse and UserPromptSubmit events, and custom memory store providers. Multi-provider fallback automatically switches to backup providers on timeout or rate-limit errors. The WebSocket and HTTP gateway serves web, CLI, desktop, and Feishu IM channels from a single configuration. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

PanWatch's three scheduled AI agents plan the trading day before the bell, watch the session, and review it after the close for your China A-share, Hong Kong, and U.S. holdings. Day one begins with the portfolio: several brokerage accounts, holdings and profit and loss, and search for stocks or listed ETFs by code or name. The pre-market agent folds overnight moves, news, and technical structure into that plan and skips exchange holidays. Through the session, the intraday monitor watches for unusual moves and technical signals. Price alerts combine price, percentage change, turnover, and volume ratio with AND/OR logic, cooldowns, and expiry times. Each rule picks its own channel from Telegram, WeCom, DingTalk, Feishu, Bark, or a webhook. Spot something odd? The brain icon next to a holding starts TradingAgents, where four analyst roles feed a bull and bear debate, a risk review, and a portfolio-manager decision, with the reasoning trail in the app and your notifications. The opportunities screen ranks AI-scored ideas with entry levels and targets, and paper trading simulates signal-based entries and exits and tracks equity and performance. At day's end, the daily report reviews the session and prepares the next trading day's plan. OpenAI-compatible providers or local Ollama models power the analysis, and the PWA installs on a phone in English or Simplified Chinese. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

When an alert fires at 3 a.m., the live chart, the runbook, and the fix are already on one page of Oxynote, a self-hosted technical wiki. The chart is a Live Metrics block that runs its own Prometheus or SQL query and draws a time series, bar chart, or gauge. Several such blocks side by side make a dashboard inside the page. Around it, the editor works like Notion, with checklists, callouts, titled code blocks, Mermaid diagrams, Figma embeds, images, and files. Internal APIs get Stripe-style reference pages with the endpoint, a curl example, and a sample response beside the explanation. Mark a page reviewable and every edit lands in a draft. A block-aware diff shows renamed endpoints, fields, and reworded sentences in one red and green view until a reviewer approves. Freshness hooks watch GitHub files, container images, web pages, or dates, and remind maintainers when something a page depends on changes. Teammates edit together live and see who holds which block. Comments attach to a word, a diagram line, or a whole chart, with replies and an inbox for mentions. The Rubber Duck assistant edits pages and runs block queries with Anthropic, OpenAI, Google, OpenRouter, or a local Ollama model, and MCP lets Claude Code and Codex read and write the docs. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Backed by over 56,000 GitHub stars and a growing ecosystem of client and server SDKs covering Flutter, React Native, Swift, Kotlin, Python, Node.js, Deno, and more, Appwrite provides a complete backend platform that replaces Firebase and Supabase with a fully self-hostable architecture. The authentication module supports email and password, phone OTP, magic links, OAuth providers including Google, GitHub, Apple, and Facebook, anonymous sessions, and JWT token management with configurable session policies. The database service provides a document-oriented store with collections, indexes, query filters, pagination, and real-time subscriptions that push changes to connected clients instantly via WebSocket. The storage service handles file uploads with built-in image manipulation including cropping, resizing, format conversion, and compression, served through a CDN-ready URL structure. Serverless functions execute custom backend logic triggered by HTTP requests, scheduled cron jobs, or database events, with runtime support for Node.js, Python, PHP, Ruby, Dart, Swift, Kotlin, and Java. The messaging service enables push notifications, SMS, and email delivery through configurable providers including APNS, FCM, Twilio, Vonage, Mailgun, and Sendgrid. Team management with role-based permissions, webhook integrations, and health monitoring APIs complete the platform. The admin console provides a web-based dashboard for managing all services, monitoring usage metrics, and configuring project settings. Deployment runs via Docker Compose with MariaDB for metadata and configurable storage adapters. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD 3-Clause licensed.

When shuffle algorithms start feeling sterile, Subwave transforms your self-hosted Navidrome or Subsonic music library into a live 24/7 personal internet radio station hosted by AI DJ personas. Every listener tunes into a single shared Icecast broadcast simultaneously. Curated tracks play alongside spoken station idents, local weather reports, news briefings, time checks, and track introductions. Want to hear something specific? Listeners submit plain-language song or mood requests directly from the web player, native mobile and desktop apps, or an MCP client, and the on-air DJ weaves those selections into the rotation. Operators staff up to 24 distinct DJ personas with guest co-hosts, programme a 24x7 weekly show grid with multi-hour episode arcs, and customize between-track skills from the browser admin console. Acoustic analysis measures BPM, musical key, loudness, vocal ranges, and track endings so crossfades and voice ducking sound like a studio broadcast across MP3, Opus, AAC, and lossless FLAC streams. An interactive Library Observatory maps every analyzed track by genre and energy. Runtime-swappable LLM providers (Ollama, OpenAI, Anthropic, and OpenRouter) and six local or cloud TTS engines keep voices flexible. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Does your container fleet silently fall behind on upstream patches until a critical vulnerability advisory forces an emergency audit? What's Up Docker continuously watches standalone Docker daemons, Compose stacks, Swarm services, Kubernetes workloads, and Nomad jobs to detect new image tags across public and private registries before sending alerts or rolling out updates automatically. Watchers connect over local sockets, TLS-secured TCP endpoints, kubeconfigs, or Nomad APIs to inventory active workloads without invasive sidecars. From there, registry connectors authenticate against Docker Hub, GitHub Container Registry, AWS ECR, Google Artifact Registry, Azure Container Registry, Quay, GitLab, Gitea, Forgejo, and self-hosted OCI registries to compare digests and tags. Flexible filtering rules let you restrict alerts to major, minor, or patch semantic version increments, match custom regular expressions, or pin specific tag patterns per container label. Once an eligible release appears, over thirty built-in triggers can dispatch notifications to Discord, Slack, Telegram, Matrix, Mattermost, Gotify, Ntfy, Pushover, Apprise, PagerDuty, or SMTP, publish events to MQTT, Kafka, RabbitMQ, or NATS, or recreate containers directly on demand. A responsive web dashboard and REST API provide manual update controls, OpenID Connect single sign-on with role-based access control, and Prometheus metrics for Grafana observability. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Prototype multi-agent AI systems without writing orchestration code: AutoGen Studio is Microsoft's low-code interface over the AutoGen AgentChat framework. You compose teams of LLM-powered agents in a visual Team Builder, either by drag-and-drop from a component library or by editing the declarative JSON specification directly. Each agent gets a model, a prompt, tools (Python functions), and the team gets termination conditions and an orchestration pattern, sequential or LLM-driven. The Playground runs teams interactively with live message streaming between agents, a visual control-transition graph, tool-call and code-execution tracking, and pause/stop controls, which makes it a practical debugger for agent behavior. Finished teams export as JSON for use in any Python application via the TeamManager class, or serve as an API endpoint. Any OpenAI-compatible model endpoint works, including local servers like Ollama or vLLM. Microsoft labels it a research prototype: use it for prototyping and evaluation, and build production systems on the underlying AutoGen framework.

Trusted by thousands of organizations with over 30 million monthly downloads and 20,000+ GitHub stars, MLflow is the largest open-source AI engineering platform providing end-to-end lifecycle management for traditional ML models, LLMs, and AI agents. The OpenTelemetry-based tracing system captures complete request flows through any LLM provider or agent framework — including OpenAI, LangChain, DSPy, Vercel AI, PydanticAI, and smolagents — with one-line auto-instrumentation that tracks inputs, outputs, token usage, and costs at every intermediate step. MLflow's evaluation engine offers 50+ built-in metrics and LLM judges for systematic quality assessment, detecting issues across correctness, latency, adherence, relevance, and safety dimensions before code reaches production. The Prompt Registry versions, tests, and deploys prompts with full lineage tracking while automated optimization algorithms improve prompt performance using evaluation feedback. The AI Gateway provides a unified API endpoint for all LLM providers, enforcing rate limits, cost controls, and access policies across the organization. MLflow 3.0 introduces the LoggedModel abstraction linking traces, metrics, and prompts to specific model versions across Python, TypeScript, Java, and R SDKs. The model registry manages deployment workflows with automated quality gates, while experiment tracking records parameters, metrics, and artifacts across training runs. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache License 2.0 licensed.

Fluxer gives friends, gaming groups, and private communities their own self-hosted instant messaging and VoIP platform that replaces Discord with private text channels, voice rooms, video calls, and screen sharing. Members can chat one-on-one in direct messages, form multi-person group conversations, or organize large community servers into categorized text and voice channels with threaded replies, reactions, and typing indicators. When a conversation moves to voice, participants can join low-latency audio and video rooms from multiple devices simultaneously, share application windows or full screens, and rely on built-in noise suppression and echo cancellation for clear calls. Rich media support allows users to share file attachments, preview embedded links, search animated GIFs through KLIPY, and upload custom community emojis and stickers. Server administrators control access through role-based permission hierarchies, member timeouts, kicks, bans, and detailed moderation audit logs that track every configuration change across the community. Integrated full-text search lets members quickly locate historical messages, code snippets, and shared files across every channel they can access. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

evcc turns surplus rooftop solar and the cheapest hours of a dynamic tariff into cheap, clean kilometers by coordinating an EV charger, heat pump, and home battery from one local dashboard. Each charging point offers Off, Smart, and Fast modes. In Smart mode, charging starts once the surplus covers the car's minimum power, follows the sun up and down, pauses when clouds win, and can switch between one and three phases on wallboxes that allow it. A solar share slider lets small systems start earlier, and Always charge keeps fussy cars from being interrupted. Set a departure time and a target charge, and a charging plan picks the cheapest or cleanest hours before it, repeating weekly if you like. Tibber, Awattar, fixed and time-based rates, dynamic feed-in prices, and CO2 and solar forecasts all feed those decisions. A home battery can claim the surplus first or lend a boost for fast charging, and load management keeps several chargers inside a circuit's current limit while honoring grid operator dimming. Hundreds of wallboxes, inverters, meters, heat pumps, and vehicle APIs are supported, including Tesla, BMW, Mercedes-Benz, Skoda, and Volkswagen. Sessions land in a history with charts and CSV export, and REST, MQTT, InfluxDB, Grafana, Home Assistant, and openHAB link evcc to the rest of the house. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

AudioMuse-AI transforms your self-hosted music collection into an intelligent sonic discovery universe that generates groove-aware playlists without relying on tag metadata or external streaming APIs. The platform scans audio files directly to extract acoustic properties, rhythmic cadence, harmonic density, and lyrical themes across seventy-two supported languages. Listeners can explore their library through a dynamic two-dimensional interactive music map, discover hidden sonic connections between distant genres, or chart smooth transitional song paths between two completely different tracks. Custom prompt-based querying lets users request niche vibes like late-night lo-fi piano, while automated clustering groups acoustically similar tracks into fresh, genre-defying collections. With Song Alchemy, curators fine-tune playlist moods by interactively adding or subtracting acoustic traits before exporting clean tracklists back to Navidrome, Jellyfin, LMS, Lyrion, Emby, or Plex. A built-in acoustic fingerprinting engine even identifies mystery tracks from twenty-second audio snippets, deduplicating songs across multi-server topologies so every file is processed only once. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.