SourceWeft
SourceWeft is an AI workstation you host yourself, where agents, your documents, and your model keys work in one place instead of scattering across chat tabs you do not control. Describe a job and a lead agent breaks it down, handing research, exploration, and execution to focused sub-agents that share the same working context and files. Agents draw on a skill library covering presentations, HTML pages, images, meeting summaries, and study guides, and you can add your own skills so good workflows become repeatable. MCP servers, web search, and web extraction connect agents to outside tools, while approved commands run inside a sandboxed environment that cannot touch the rest of your server. Feed it PDFs, web pages, notes, YouTube videos, Notion, Drive, Gmail, or Slack, then follow citations from any answer back to the source material it came from. Bring your own keys for the chat and indexing models you prefer, organize the team into workspaces with roles and access controls, and pick up any conversation from the web app or desktop clients. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.
Email OAuth 2.0 Proxy
Your scanner still emails PDFs, your backup scripts still send nightly reports, and none of them will ever learn OAuth 2.0: Email OAuth 2.0 Proxy learns it on their behalf. It listens on local IMAP, POP, and SMTP ports on your server, and when a client logs in the old-fashioned way with a username and password, the proxy swaps that exchange for a modern SASL XOAUTH2 token before the connection ever reaches the provider. The client never knows anything changed, so ancient mail apps, embedded devices, monitoring tools, and hand-rolled scripts keep sending and fetching mail through Outlook, Office 365, Gmail, Google Workspace, Fastmail, Yahoo, AOL, and any other provider that demands OAuth 2.0. The hop from your client to the proxy stays simple, while the proxy opens a fully encrypted TLS connection upstream, including STARTTLS negotiation for SMTP relays that require it. One proxy instance serves many accounts at once, with each mailbox mapped to its own local port and its tokens cached under a password you control. Optional plugins can even rewrite traffic in flight: strip Microsoft Defender Safe Links back to their real URLs, stop duplicate sent messages, or swallow test mail into a black hole. Setup is a single configuration file covering server ports, per-account scopes, and token endpoints, and the proxy then runs quietly as a headless service. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.
Drive
Somewhere in every organisation there is a folder called FINAL_v2 that nobody dares delete, and Drive from La Suite exists to end that. It gives teams a shared file space where uploads land in organised workspaces, versions stay findable through search, and every file or folder carries its own access list. You preview PDFs, images, audio, and video in the browser, and office documents open for editing through Collabora or OnlyOffice without downloading a thing. Sharing reaches outside the organisation too: invite external partners by link, even without an account, and revoke access the moment a project ends. Uploads pass malware scanning before they touch storage, a trash bin restores accidents, and quotas with usage metrics keep big archives honest. Administrators plug in their own OIDC identity provider, so logins follow the same single sign-on as the rest of the stack, while an embeddable file picker lets other internal apps reuse Drive as their document library. Because the data lives in your own S3-compatible storage, sovereignty requests stop being an argument with a vendor and become a setting. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Horilla HRMS
Horilla HRMS gives a growing company one home for the whole employee journey, from the first job posting to the final payslip, instead of five disconnected HR tools. Recruiters publish openings, collect resumes, and drag candidates through a Kanban hiring pipeline with interview scheduling and email built in; the moment someone is hired, structured onboarding checklists take over. Every employee record lives in one directory with documents, job history, and reporting lines, and staff help themselves through a self-service portal for leave requests, attendance views, and payslip downloads. Attendance arrives from biometric devices, mobile check-ins, or geo-fenced punches, and leave balances update themselves as approvals flow through managers. Payroll then reads that same attendance and leave data, applies your salary structures, overtime rules, loans, and statutory deductions, and generates itemized payslips in a single run. Managers set goals, run review cycles, and collect continuous feedback in the performance module, while the asset register tracks every laptop and phone issued to the team. An internal helpdesk queues employee requests with priorities and assignees, offboarding workflows make sure exits are as orderly as arrivals, and LDAP integration ties accounts to your existing directory. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. LGPL-2.1 licensed.
Facet
Thousands of frames land on the card after a wedding shoot, and Facet finds the keepers among the bursts, blinks, and near-duplicates. Facet scores every photo across nine dimensions, aesthetic quality, composition, face quality, eye sharpness, technical sharpness, color, exposure, subject saliency, and dynamic range, with category-specific weights for portraits, landscapes, wildlife, and 30-plus other content types. The culling darkroom groups bursts and visually similar frames, protects exposure brackets and panorama sequences, and flags closed eyes per face, so you keep the sharpest open-eyed frame and reject the rest in one pass. Face detection clusters into people you can rename, merge, and search, while albums, star ratings, favorites, and AI content tags organize what survives. Browse survivors through a mosaic gallery with semantic search by plain description, a timeline, a geotag map, and slideshow capsules. Statistics dashboards track your gear usage and metric correlations, and the weight editor learns from A/B comparisons so scores drift toward your own taste. Shared album links support client proofing with hearts and comments, phones auto-upload over the built-in WebDAV inbox, and ratings round-trip to Lightroom, darktable, and Immich through XMP sidecars. Everything runs locally on your own hardware: no cloud accounts, no subscriptions, no photo ever leaves the server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Cadence Workflow
An order that waits days for a payment or a manager's approval survives crashes, restarts, and deployments in Cadence, a workflow engine that resumes each process exactly where it stopped. Developers write the order's logic as ordinary Go or Java code. The engine records every step in an event history and replays it to rebuild state on any worker. Activities send the emails, call the APIs, and write the database rows, each with its own retry policy, timeout, and heartbeat. A durable timer waits seconds or months without holding a thread, a cron schedule launches recurring runs, and a signal delivers the payment confirmation into the running workflow. Queries read its state without changing it, child workflows split big processes into reusable parts, and versioning allows code changes while older executions are still in flight. Domains separate teams and applications, task lists carry their own rate limits and priorities, global domains replicate across clusters and fail over between them, and archival retains closed histories. Cadence Web finds executions with SQL-like queries, lays out event history as a grouped table or a timeline, and exposes payloads, pending activities, and stack traces. It can start, reset, signal, cancel, or terminate runs, with batch actions for thousands of workflows at once. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.
Docspell
Convert paper archives, email attachments, and PDF records into an organized digital repository with Docspell, an open-source document management system that automates optical character recognition, metadata extraction, and full-text search. Users can ingest receipts and invoices through network scanners, monitored IMAP email mailboxes, mobile uploads, or drag-and-drop browser tools. The background processing pipeline executes optical character recognition via Tesseract, enhances image contrast with unpaper, and extracts text from Word documents and PDFs. Machine learning algorithms analyze document syntax to predict correspondents, suggest relevant organization tags, and identify due dates automatically. Team members can search their entire filing cabinet using complex Boolean queries and full-text indexing powered by Apache Solr or PostgreSQL. Administrators can configure multi-user collectives with isolated permissions, define custom metadata attributes, set up webhooks, and share time-limited document download links. Users can also merge multi-page scans, track processing job queues, and export curated document collections for tax filings or legal audits. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GNU AGPL v3.0 licensed.
KitchenOwl
Your household's kitchen command center: shared grocery lists that sync in real-time across everyone's phones, a recipe book that imports from 500+ websites with one tap, a weekly meal planner that auto-generates shopping lists, and expense tracking that splits costs between roommates or family members. Native apps for Android, iOS, macOS, Windows, Linux, and web provide partial offline support so the list works even in store dead zones. The recipe-scrapers library with wild mode fallback handles imports from virtually any cooking site, extracting ingredients, steps, and images automatically — then converts recipe ingredients directly to shopping items with a single tap. Smart suggestions learn from your patterns over time, ordering items by your typical store route and recommending frequently purchased products. OpenID Connect authentication supports Google, Apple, Authelia, and custom providers. LLM-powered ingredient parsing uses configurable AI models for intelligent recipe text extraction. A Home Assistant integration enables voice-controlled list management via smart speakers. The REST API with a published Python client library allows third-party automation. Multi-language support covers 30+ languages through Weblate community translations. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
Carbone
Document-generation code is the worst kind of code in your backlog - Carbone kills it. Its insight is separating design from data - templates are ordinary office documents (DOCX, ODT, XLSX, PPTX, HTML, even custom XML) built in LibreOffice, Microsoft Office, or Google Docs, with mustache-like markers such as {d.companyName} typed directly into the text. Send a template plus JSON from your existing APIs to the HTTP API, and Carbone returns the finished document - exported as-is or converted to PDF, XLSX, CSV, HTML, PNG, EPUB, and more via its integrated LibreOffice converter (Chromium and OnlyOffice engines are also supported for HTML-fidelity and office-format conversions). The template language goes well beyond substitution: loops over arrays render dynamic table rows, filters and aggregations run inside the document, and built-in formatters handle dates, numbers, currencies, timezones, and locales, with custom JavaScript formatters when needed. One template serves multiple languages through translation markers with auto-maintained translation files. The XML-agnostic engine means anything your document editor can design - pagination, headers, footers, nested tables, charts - survives generation intact, and Carbone guarantees no breaking changes in template syntax. Node.js-based, fast via multi-threaded LibreOffice conversion. The invoices, contracts, and reports your product owes its users become template edits, not sprints.
Archon
Stop hoping your AI coding assistant remembers to plan before it codes, test after it implements, and review before it ships. Archon wraps Claude Code, OpenAI Codex, and other AI agents inside structured YAML workflows that enforce the same development process every single time. Define your pipeline as a directed acyclic graph of nodes (AI tasks, shell scripts, approval gates, loops) and Archon handles the orchestration: resolving dependencies, running independent nodes in parallel, passing artifacts between steps, and isolating every run in its own git worktree so five bug fixes can proceed simultaneously without conflicts. Ship with 17 pre-built workflows covering everything from "idea to merged PR" to automated conflict resolution, or author your own by committing YAML files to your repository's .archon/workflows/ directory. The web dashboard, launched with archon serve, provides a conversation interface with real-time streaming, a visual drag-and-drop workflow builder for creating DAG pipelines, step-by-step progress monitoring for every run, and a unified sidebar aggregating conversations from CLI, Slack, Telegram, and GitHub into one view. An NLP router parses natural language requests and automatically selects the right workflow. Structured JSON output schemas let you enforce typed responses from AI nodes, with validation and auto-repair for providers that lack native schema support. Every workflow file is version-controlled, portable, and reviewable in pull requests, so your entire team runs identical processes from day one. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Frappe
Define a DocType in Frappe and the framework automatically generates database tables, Python ORM classes, REST API endpoints, form views, list views, and role-based permission rules from that single schema definition. The meta-driven architecture stores schemas as database records, letting administrators add fields, reorder layouts, and modify validation rules through the browser-based Form Builder without redeployment. Server-side Python controllers handle business logic through hook-based lifecycle events while client-side JavaScript manages interactive form behavior, with WebSocket connections providing real-time updates across sessions. The built-in workflow engine defines document state machines with role-gated transitions, email notifications, and conditional action visibility. Pre-configured Desk views include list, form, report, tree, kanban, calendar, and dashboard layouts with drag-and-drop workspace customization. The report builder generates grid reports with configurable columns, filters, grouping, and chart visualizations from DocType data or custom SQL and Python scripts. Background job processing uses Redis queues for email delivery, data imports, and periodic tasks. Virtual DocTypes connect external databases to the framework's UI without data migration. Docker deployment via frappe_docker provides production-ready Compose configurations with MariaDB, Redis, Nginx, and worker containers. The foundation powering ERPNext, HRMS, CRM, and Helpdesk in production. Over 10,500 GitHub stars. MIT licensed.
salt.md
salt.md is an open-source, self-hosted workspace where your team and its AI agents work on the same documents and databases, under the same permissions and with the same history. A slash-menu block editor handles checklists, tables, callouts, columns, code, diagrams, and embeds. Page links, backlinks, and a graph view show how pages connect. Any page can become a collection with typed properties like select, date, person, relation, rollup, and formula, shown as a table, board, list, gallery, calendar, timeline, or form. Ctrl+K searches titles, body text, row values, and the text inside uploaded PDFs. Two people can type in the same paragraph at once with live cursors. Comments, page history, and an activity log record who changed what. Publish a page as a read-only link with an optional password and expiry, or hand people without accounts a form that adds rows to a collection. Agents connect over MCP with 33 tools for searching, writing, building databases, and commenting, using tokens scoped to one workspace or read-only. Signed webhooks, iCalendar feeds, and Google or Microsoft sign-in link it to the rest of your stack. Import Markdown, ZIP archives, or a Notion export, and export pages as Markdown, HTML, or PDF. Use it for handbooks, meeting notes, project boards, and a knowledge base your assistants can read. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
ToolJet
Retool's job, self-hosted: ToolJet is an open-source low-code platform for building internal tools, dashboards, and admin panels. Apps are assembled in a drag-and-drop visual builder with 60+ responsive components, including tables, charts, forms, and lists, and connected to 80+ data sources: PostgreSQL, MySQL, MongoDB, REST and GraphQL APIs, cloud storage, and common SaaS tools. When visual configuration is not enough, you can run JavaScript or Python inline for queries and transformations. A built-in no-code database (ToolJet Database) covers apps that need their own tables without provisioning an external database, Workflows add node-based automation for background jobs with dedicated worker containers and a Redis-backed queue, and multi-page apps with multiplayer editing, inline comments, and mentions support team development. Security is designed for internal data: credentials are AES-256-GCM encrypted, data flows proxy-only through your server so database contents never reach a third-party cloud, and granular per-app access control plus SSO gate each tool. Where Retool-style platforms bill per builder and sometimes per end user, the self-hosted Community Edition serves unlimited builders and users at hosting cost, and full source availability means the platform itself can be forked, audited, and extended. The stack is Node.js and React on PostgreSQL, deployed via Docker.
DevTrack
DevTrack turns your GitHub activity into a living dashboard of commit streaks, pull-request analytics, and goals that quietly update themselves. Sign in with GitHub and your last year appears as a contribution heatmap you can filter by repository and language, next to the streak you are protecting and the freeze you are saving for a holiday. Pull requests get the honest treatment: merge rate, average review time, and open-versus-closed breakdowns that show whether reviews or authors are the bottleneck. Weekly and monthly goals fill themselves in from live activity, while the consistency score and activity rings tell you whether your rhythm is steady or heroic but rare. When you want the story told back to you, an AI mentor who knows your history offers guidance, a résumé generator builds an ATS-friendly CV from merged pull requests for the role you name, and a weekly summary explains your own graphs in plain words. Opt into the public leaderboard to rank your streak, commits, and PRs against other developers, or keep everything private and share only the profile page and embeddable badges you choose. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Apache DolphinScheduler
When nightly SQL, Spark, and Python jobs outgrow cron, Apache DolphinScheduler replaces the tangle with a visual workflow orchestrator where every dependency is a line on a drag-and-drop canvas. More than 30 built-in task types cover Shell, SQL, Python, HTTP, Spark, Flink, Kubernetes, SeaTunnel, and Jupyter, while logic nodes add sub-workflows, conditions, switches, and dependencies across projects. Workflows can also be written as code through a Python SDK, YAML, or the Open API and run on timezone-aware cron schedules. Backfill reruns a workflow across a date range or a hand-picked list of dates, in serial or parallel, and any instance can be modified, rolled back, and rerun without touching the saved template. Kill, pause, and resume running tasks, and choose whether a failure ends the run or lets parallel branches continue. Alert groups route results to Email, Slack, Telegram, PagerDuty, Feishu, DingTalk, webhooks, or custom scripts. Tenants, worker groups, and environments isolate teams on shared infrastructure, with project and data source permissions. A Resource Center stores scripts and task files locally or on HDFS, MinIO, and cloud object storage, and the monitor page shows master, worker, and database health at a glance. Standalone, Cluster, Docker, and Kubernetes deployments scale from one node to many masters and workers that can join or leave a running cluster. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.
Mailcow
With over 13,000 GitHub stars and active monthly releases, Mailcow delivers a production-ready mail server infrastructure through Docker Compose orchestration of twelve integrated containers. The stack pairs Postfix as the MTA handling SMTP traffic with Dovecot for IMAP and POP3 retrieval featuring the Flatcurve full-text search engine, while Rspamd provides machine-learning-powered spam filtering with Bayesian classification, DKIM signing, and ARC support. ClamAV scans attachments for malware including Office document macro analysis via Olefy, and SOGo serves as a responsive webmail client with CalDAV, CardDAV, and Microsoft ActiveSync synchronization. The admin panel manages multiple domains, per-user spam score thresholds, quarantine review, black and whitelists, temporary spam aliases, mailbox quotas, and TLS enforcement policies for both inbound and outbound messages. Security features include two-factor authentication via TOTP, WebAuthn, and Yubikey OTP, a Fail2ban-like Netfilter integration for brute-force protection, and automatic SPF, DKIM, and DMARC configuration. The ACME container handles Let's Encrypt certificate generation with DNS-01 challenge support, while Postfix TLS-Pol provides MTA-STS and DANE/TLSA resolution for encrypted transport. Built-in imapsync enables periodic migration from remote mailboxes, and the REST API allows programmatic management of all server resources. MariaDB stores user data, Redis caches configuration and sessions, and Unbound provides local DNSSEC-validating DNS resolution. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.
Hasura
A PostgreSQL database becomes a production-grade GraphQL API the moment Hasura GraphQL Engine points at it: track tables and relationships - existing schemas included - and full query, mutation, and subscription types appear with where, order_by, limit, offset, and on_conflict arguments, no resolvers or boilerplate written. Its Haskell core compiles GraphQL to efficient SQL, and any query becomes a real-time live query with a single keyword, powering dashboards and collaborative UIs over standard GraphQL subscriptions. Authorization is where Hasura earns its enterprise reputation: role-based access control with row- and column-level permission policies driven by session variables from JWTs, auth webhooks, or headers - each role effectively sees its own GraphQL schema containing only what it may touch, integrating cleanly with Auth0, Firebase, or homegrown auth. Event triggers fire webhooks on inserts, updates, and deletes for asynchronous business logic; Actions extend the schema with custom REST handlers; remote schema stitching merges external GraphQL services into one endpoint; and auto-generated REST endpoints serve clients that skip GraphQL. A browser console handles data modeling and API exploration, the CLI manages migrations and metadata as code, and deployment is a single stateless Docker container beside Postgres.
GymCoach
Strength training, cardio, and body metrics land in one workout log on your own server, backed by an optional AI coach that explains its advice from your real numbers. Quick entry such as 100x8@9 logs weight, reps, and effort in one line, with a rest timer, plate-loading calculator, and warm-up ramp beside the set table. A weight picker offers only loads your equipment can build, and a readiness check-in adjusts the suggested load and says why. Templates for 5/3/1 BBB, GZCLP, nSuns, PPL, and Upper/Lower run as written and edit like any custom program. Progress pages chart estimated 1RM, weekly volume per muscle group against MEV and MRV bands, a muscle heat map, bodyweight goals, and a training calendar. Garmin FIT, TCX, and GPX imports need no cloud account and add heart-rate charts and aerobic decoupling to each run or ride. The coach writes a weekly debrief, chats in a streaming conversation, and drafts a full program from a one-sentence goal, using your own Anthropic or OpenRouter key. History imports from Strong or Hevy CSV files with a dry-run preview and exports to CSV or TCX, and an MCP connector lets ChatGPT or other agents analyse it. The app installs as an offline-capable PWA, speaks English, French, Russian, and German, and keeps every user's data separate. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.