IRONSIGHT fuses over 50 publicly available intelligence sources into a single real-time dashboard that requires zero API keys and zero configuration. The Live Intel Feed aggregates 20+ RSS news sources with keyword relevance filtering from outlets including Reuters, Al Jazeera, and Kyiv Post. The Telegram OSINT module scrapes 27 channels every 60 seconds with automatic translation from Hebrew, Arabic, and Farsi. The interactive Leaflet Theater Map plots military aircraft positions via ADS-B transponder data, naval vessel locations in the Persian Gulf and Eastern Mediterranean, strike markers extracted from news and Telegram, missile trajectory arcs with range rings, and country-border overlays with a distance measurement tool. A header toggle switches the entire dashboard between Iran/Israel and Russia/Ukraine theaters, re-pointing every panel, map layer, and data feed to the selected conflict. The Israel Alert module streams live Pikud HaOref missile alerts with audio notifications, while the Conflict Monitor categorizes events into strikes, defense, diplomatic, and nuclear. Financial panels track defense contractor stocks, S&P 500, VIX, gold, Bitcoin, Ethereum, energy commodities via Yahoo Finance, and Polymarket prediction odds on conflict outcomes. NASA FIRMS satellite thermal detection flags fire and explosion signatures. The Next.js 16 App Router handles server-side data fetching for RSS and API endpoints while client-side React state management drives real-time polling updates. On RepoCloud, deploy IRONSIGHT on a dedicated VPS with persistent storage, root SSH access, and full control over your intelligence monitoring environment, all under the MIT license.

When warehouse data never reaches the CRM, ad platform, or help desk that needs it, Multiwoven is the open-source reverse ETL platform that syncs it there on a schedule. Sources include Snowflake, BigQuery, Redshift, Databricks, PostgreSQL, ClickHouse, MariaDB, Oracle, Amazon S3, and SFTP. Models define what to move: write SQL with a 100-row preview, pick tables in a visual selector, or reuse existing dbt models. Destinations span Salesforce, HubSpot, Klaviyo, Mailchimp, Zendesk, Slack, Airtable, Google Sheets, Stripe, Facebook Custom Audiences, HTTP endpoints, and vector stores such as Pinecone, Qdrant, and Weaviate. Each sync maps model columns onto destination objects like Salesforce Account, Contact, or Opportunity, then runs as a full refresh or as an incremental sync that moves only new or changed rows, optionally tracked by a cursor field. Schedules can be manual, an interval from minutes to weeks, or a cron expression. A dashboard reports sync activity, each run records its status with successful and failed row counts, and failed runs can trigger status emails. Workspaces keep sources, models, syncs, and destinations separate for each team, while Admin, Member, and Viewer roles and email invitations control access. A connector framework lets teams add sources or destinations that are not yet supported. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

On the factory floor, the data already exists; it is just locked inside machines, PLCs, and protocols nobody on the analytics team speaks. StreamPipes unlocks it with guided adapters for OPC UA (including a web-based node browser), MQTT, Kafka, Pulsar, REST services, and industrial controllers, turning each source into a live stream in minutes. Domain experts then drag those streams into the pipeline editor, chain processors and sinks on a canvas, and watch connection validation check schema compatibility as they build, with live preview showing real values before anything is saved. Pipelines filter, enrich, aggregate, and route machine data, raise alerts, and write results to the built-in time-series data lake, where the data explorer charts history and spots trends. Finished pipelines run under an overview that starts, stops, and bulk-manages them, while detail views expose logs, metrics, status, and the pipeline as code. Live dashboards carry the same data to shop-floor screens and operations centers, organized around assets so a line, a cell, or a single machine becomes the navigation unit. Developers extend everything with custom adapters, processors, and sinks built on the Java SDK and deployed as microservices, or drive the platform from Python, Go, and Java clients. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

No cookies, no fingerprinting, no cross-site tracking, no personal data collection - Umami's privacy contract is the foundation of the open-source web analytics platform. IP addresses are hashed rather than stored, which makes it GDPR, CCPA, and PECR compliant by default - the consent banner can come off the site entirely. The tracking script is under 2 KB, roughly 20x smaller than Google Analytics, so measurement stops being a page-weight tax. The dashboard covers the core metrics - pageviews, visitors, bounce rate, visit duration, referrers, browsers, devices, and countries - with any date range and filtering by country or device. Beyond pageviews, custom events track clicks, form submissions, and signups via a data attribute or one JavaScript call, and advanced reports add funnels, user journeys, retention and cohort analysis, goals, and automatic UTM campaign tracking. Anonymous session views show individual visitor activity without identifying anyone. Teams share websites with role-based access, one instance manages unlimited sites, and a full REST API exposes every metric programmatically. MIT-licensed and self-hosted on PostgreSQL or MySQL via Docker, your analytics data never leaves your infrastructure.

One Janus installation can host a video meeting in one session, stream a camera feed in another, and bridge a browser call into a telephone network in a third, because Janus is a general-purpose WebRTC server whose work is done by interchangeable plugins. The VideoRoom plugin publishes each participant's streams to everyone else in the room with simulcast and viewport selection, so a class or team call adapts quality per viewer instead of forcing one bitrate on all. Streaming mounts live or prerecorded sources, including RTSP cameras and RTP feeds, and hands them to any number of WebRTC viewers, while AudioBridge mixes voices into conference rooms with recording and signed-token access. SIP and NoSIP plugins register with existing VoIP infrastructure and place or receive calls, translating between WebRTC media and telephone audio so a web page can ring a desk phone. Record&Play captures publisher streams to files you can replay through the same server, TextRoom adds data-channel chat rooms, and Lua or JavaScript plugins let you script custom media logic without recompiling the core. Applications talk to Janus over HTTP or WebSocket APIs, with RabbitMQ, MQTT, and NATS transports for bus-driven deployments, and event handlers report session activity to your monitoring stack. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

GroupOffice checks your whole company in at one address: mail, meetings, projects, invoices, and files behind a single login on your own server. The built-in mail client saves messages straight onto projects or contacts, signs and encrypts with S/MIME, and shares folders and accounts across the team. Shared calendars offer team views, bookable resources, and video meetings, while address books carry custom fields and comments so customer knowledge survives staff changes. Projects gather their tasks, files, and discussions in one place, track hours as work happens, and turn those hours and costs into invoices and reports. Support tickets arrive from your website or by email and stay organized by team, and newsletters compose campaigns from templates filled with your own data. Files co-edit in the browser through OnlyOffice or Collabora, connect to desktops over WebDAV, and sync to native phone and computer apps over open protocols. Two-factor authentication, encryption, and a module system you can extend with your own tools keep the office private and shaped to how you actually work. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Leave a fake door unlocked and see who walks through: Krawl is a self-hosted honeypot that poses as a sloppy web server and records everything scanners and scrapers try. Fake WordPress, phpMyAdmin, and admin logins. Every attempt logged, every credential captured. A .env file leaking fake database strings, AWS keys, and Stripe secrets. SQL injection, XSS, path traversal, XXE, and command injection traps that answer with believable fake output. SQLMap gets a different database error on every request. Malicious crawlers wander an endless maze of random links. An optional tarpit adds delay and word salad that cost scrapers time, storage, and tokens. Optional AI-generated pages write a plausible decoy for any path an attacker requests. A hidden dashboard shows an attacker map, top IPs, captured credentials, and per-IP forensics. TLSH fuzzy hashing groups webshell variants into campaigns. A behavior score labels each IP attacker, bad crawler, good crawler, or regular user. Export bans as raw lists, iptables, or nftables rules, with guides for Fail2Ban, OPNsense, and RouterOS. A canary-token link in decoy pages emails you the IP and user agent of anyone who follows it. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Ruvio is a Redis-compatible in-memory database that folds the cache, the lock service, the rate limiter, and the delay queue into one Rust process your existing clients already speak to. Connect with redis-cli or the first-party clients for Rust, .NET, Go, Java, Python, and Node.js, and the familiar strings, hashes, lists, sets, sorted sets, and streams are there, 287 commands in all. The difference shows in the primitives that usually need a second system: LEASE grants a fencing token for a key, SEMAPHORE caps concurrent holders with per-holder TTLs, INCRBY with MAX builds a counter that refuses to pass capacity, SETV writes only when your version is still current, CHANGES arms a feed of later writes on a shard, and XADD DELAY stores a stream entry now and reveals it to consumer groups when the delay passes. Each shard owns its keys outright, parsing, recording, and applying without a lock on the hot path, and features cost memory only on keys that use them. Durability is a startup choice you name, memory, snapshot, everysec, or always, written through a write-ahead log, and replicas copy shard by shard while optional coordinators agree through Raft to promote a replica when a primary stops answering. A browser operator UI shows data, command forms, Pub/Sub, and ACL users on the running server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

jshERP lets a small or midsize business, from a shop to a wholesaler, run purchasing, stock, sales, and money from one place instead of scattered spreadsheets. A purchase requisition becomes a purchase order, then a receipt that raises stock. A sales order becomes an outbound delivery that lowers it, or a purchase order when more must be bought in. Retail sales, returns, and serial-number scanning run through the same stock. Products sit in a category tree up to three levels deep, with barcodes, images, multiple attributes, customer-specific prices, and a base unit plus up to three secondary units. Transfers move goods between warehouses, assembly and disassembly merge and split products, and shelf locations record where each item sits. Other receipts and issues cover opening stock, stocktake corrections, and scrapped goods, while moving-average cost keeps valuation current. Finance logs income, expenses, receipts, payments, transfers, and prepayments against settlement accounts, and customer and supplier reconciliation reports export to Excel. Reports track stock levels, low-stock alerts, in-out statistics, and purchase and sales summaries, and the home page totals yesterday's and retail sales. Roles limit access down to single menus and buttons and can mask prices. A tenant model runs several businesses on one installation, and the interface switches among 73 languages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

With 17,000 GitHub stars, 460+ contributors, and deployments across telecommunications, automotive, and financial services running on over 10,000 CPU cores at the largest known installations, Apache APISIX delivers a fully dynamic API gateway achieving 140,000 QPS on eight cores with sub-millisecond latency through NGINX's event-driven architecture and LuaJIT-compiled plugin execution. The 100+ open-source plugins cover authentication (JWT, OAuth 2.0, OIDC, Keycloak, LDAP), observability (Prometheus, Datadog, SkyWalking, OpenTelemetry), traffic management (rate limiting, circuit breaking, canary releases, traffic splitting), and security (CORS, IP restriction, CSRF protection) — all hot-reloadable without process restarts via etcd-based real-time configuration synchronization. Multi-protocol support handles HTTP, gRPC, MQTT, TCP, UDP, and WebSocket traffic for both north-south API access and east-west service mesh communication. AI gateway capabilities proxy requests to 20+ LLM providers with semantic caching, token-aware rate limiting, provider failover routing, and content moderation. Custom plugins extend the gateway in Lua, Go, Java, Python, or WebAssembly. Radixtree route matching handles 100,000+ routes without performance degradation. Functions as a Kubernetes ingress controller with native service discovery for Consul, Nacos, and Eureka. Deploy via Docker or Helm charts with horizontal scaling through etcd cluster coordination. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Your net worth is scattered across banks, brokers, a pension, and a mortgage, and no single screen shows all of it at once. Aurelio Finance gathers those pieces on your own server: record each institution's cash and holdings as dated situations, then let later transactions roll them forward so today's balance always traces back to a photograph of what you held and the events after it. Every position is priced from the market with its cost basis, gain, and dividends, while the look through view opens your ETFs and funds to show real exposure by country, sector, company, and currency, so overlapping funds stop hiding concentration. Recurring investment plans, homes and other real assets, and the loans against them sit beside income, expenses, and your savings rate, and each financial goal shows the return it needs to be reached. When you want a second opinion, Ask Aurelio reads your own records, can search the web, and proposes changes as cards you confirm or reject, never silently editing your data. Its analysis mode goes further, letting an analyst and a confidant argue over your portfolio before a synthesis tells you what to look at first, and surviving ideas land on a watchlist that your totals never count. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Alexandrie provides a structured knowledge base with an extended Markdown editor, granular per-document permissions, and offline editing through its progressive web app. The CodeMirror 6 editor goes well beyond standard Markdown with colored containers, academic callout blocks, KaTeX math expressions, syntax-highlighted code blocks, footnotes, interactive checkboxes, cards, panels, and a custom snippet system with import and export. Full-text search via the Ctrl+K command center returns instant results with content snippets and relevance ranking across all workspaces. Five permission levels covering None, Read, Write, Admin, and Owner apply per document and per user, while OIDC single sign-on integrates with Google, GitHub, Microsoft, Discord, and any OpenID Connect provider. Documents organize into a hierarchical tree of workspaces, categories, and nested entries with tags, bookmarks, pinned notes, and custom icons. Integrated Kanban boards handle task management within each workspace without switching applications. The PWA installs on any device for full offline editing with seamless sync when connectivity returns. Voice-to-text dictation captures notes hands-free, and one-click ZIP backup exports all documents, files, and settings as a portable archive. Over 2,000 GitHub stars and 41 releases back the project. The Docker Compose stack orchestrates the Nuxt 4 frontend, Go Gin backend, MySQL 8 database, and S3-compatible RustFS object storage. Running on a VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

A secure drop box for tips and misconduct reports, GlobaLeaks lets organizations, newsrooms, and public institutions receive anonymous submissions and reply to the people behind them. Whistleblowers answer a questionnaire, attach files, and leave with a unique 16-digit receipt that reopens their report later for replies, comments, and the choice of whether and when to reveal their identity. Administrators build the intake form with a questionnaire builder, route reports through channels by topic or department, and host several branded whistleblowing sites from one installation in more than 90 languages. Recipients triage in a searchable inbox with labels, reminders, and customizable case statuses. Analysts, custodians, and administrators get separate roles, and the custodian role can gate access to a reporter's identity. Reports and messages are encrypted, an automatic Tor onion service gives whistleblowers an anonymous way in, two-factor authentication protects staff logins, and PGP secures email notifications. Audit logs track staff actions, and retention rules expire old reports to support GDPR duties and EU Directive 2019/1937 workflows. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

BottleCRM delivers a self-hosted customer relationship management platform that unifies sales lead qualification, visual deal pipeline tracking, helpdesk ticketing, and client invoicing into one workspace. Sales representatives capture prospects through embeddable website forms or CSV imports, qualifying leads before converting them into synchronized account, contact, and opportunity records. Account executives manage visual Kanban deal boards with stage aging timers and weighted pipeline forecasting, dragging cards across qualification phases while preserving complete interaction timelines. Customer support teams handle incoming inquiries with multi-level ticket hierarchies, business-hours service level agreement clocks, automated escalations, approval workflows, and canned response macros. Billing managers generate professional quotes and invoices directly from won deals, applying customizable line-item tax rates and tracking payment statuses through customer self-service portals. Development teams connect autonomous AI agents and third-party software using personal access tokens against the documented REST API to automate data entry and workflow updates. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

InvenTree is an inventory management system for electronics manufacturers, makerspaces, and small-to-medium businesses. The hierarchical part categorization system organizes components into unlimited nested categories, while stock items tracked across cascading locations and sub-locations provide instant visibility into current inventory levels, with optional serial number tracking for individual item traceability and acceptance testing. Intelligent BOM management calculates sub-part requirements, validates availability against current stock, supports multi-format BOM upload including KiCad integration, and generates detailed bills of materials with full database enrichment. Build orders consume BOM-allocated stock to produce assembled parts with step-by-step work order tracking, while purchase orders manage supplier relationships with pricing history, lead times, and automatic stock receipt processing. The modern React frontend built with Mantine, TanStack Query, and Zustand provides responsive data tables, tree-select navigation, a preview drawer, and a snippet editor. The extensible plugin system supports 19 mixin types including BarcodeMixin for scanner integration, LabelPrintingMixin for Zebra and Brother printers, AppMixin for custom database tables, and ScheduleMixin for periodic background tasks. Companion mobile apps on Android and iOS provide barcode scanning and stock operations in the warehouse. Docker Compose deploys with PostgreSQL, MySQL, or MariaDB backends behind any reverse proxy. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Evolution API gives your applications a production-ready REST interface to WhatsApp, supporting both free Baileys-based Web connections and Meta's official Business Cloud API from the same server. With 9,200+ stars and 7,100+ forks, it is the most widely deployed WhatsApp integration layer available. Each installation handles unlimited isolated instances (one per phone number) with independent auth, webhooks, and database separation via Prisma ORM against PostgreSQL or MySQL, cached through Redis. Message types include text, images, audio, video, documents, contacts, locations, interactive buttons, list messages, carousel cards, and PIX payment links through unified endpoints. Native integrations connect to Typebot for chatbot flows, Chatwoot for multi-agent support, Dify and OpenAI for AI conversations, N8N and Flowise for workflow automation, and RabbitMQ, Kafka, or SQS for enterprise event streaming. Socket.io delivers real-time message and connection events. Amazon S3 or MinIO handles media offloading. The Evolution Manager v2 dashboard provides visual instance creation, QR code scanning, connection monitoring, and integration configuration without touching the API directly. Docker Compose bundles the server, PostgreSQL, and Redis with environment-variable-driven setup. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

MikoPBX gives a small business a complete phone system on a server it controls, with extensions, call queues, IVR menus, and call recording instead of per-seat hosted PBX fees. Follow a call through it: incoming rules per provider match exact numbers or patterns, fall through by priority when nobody answers, and end at a default route. Each employee gets an extension with SIP credentials, forwarding for no-answer, busy, and unavailable states, and an optional recording switch. Queues offer seven distribution strategies, including Ring All, Least Recent, Fewest Calls, and Memory Hunt, and can announce each caller's position and estimated wait. IVR menus play a recorded greeting, route keypad choices to departments or extensions, and fall back to a default number after a set number of retries. Call history filters by caller, destination, or DID, flags missed calls in red, and plays or downloads recordings as WebM, MP3, WAV, or OGG. Voicemail, call transfer, call pickup, and a holiday and night-time switcher serve daily needs, while free and paid marketplace modules, among them a softphone, auto dialer, and LDAP/AD sync, handle the rest. A firewall, Fail2Ban, passkey sign-in, and CrowdSec integration protect the system, and a REST API with more than 250 endpoints lets other tools manage it. The interface speaks 26 languages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Ditch the spreadsheet for good: Whisper Money is a privacy-first personal finance app you host yourself to see exactly where your money goes, without your data being sold or profiled for ads. Connect multiple bank accounts in one place, fill them by hand or CSV import, and watch transactions categorize themselves automatically. Automation rules handle the repetitive sorting: rent, subscriptions, and transfers land in the right buckets every time. Brokers and exchanges including Indexa Capital, Coinbase, Binance, Bitpanda, Wise, and Interactive Brokers connect with your own API keys, so investments sit beside everyday spending. Optional open banking through EnableBanking can pull a year of movements and keep them current, and it stays switched off until you configure it. AI features suggest categories and rules and summarize your stats reports, and you choose the provider: Gemini by default, or OpenAI, Anthropic, Groq, DeepSeek, Mistral, any OpenAI-compatible endpoint, or a local Ollama server so nothing leaves your infrastructure. Spending pattern insights turn raw transactions into an honest picture of your habits, month after month. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. CC BY-NC 4.0 licensed.