Any blog, documentation site, or static website can host a complete comment section by running its own Waline server, with Markdown, emoji, reactions, and moderation tools included. A visitor writes as a guest, registers an account, or signs in with GitHub, Twitter, Facebook, Weibo, or QQ, and a live preview shows the formatting before anything is posted. Comments accept tables, strikethrough, highlighted code blocks, TeX formulas, custom emoji packs, and Giphy GIF search. On submission, a sanitizer strips scripts and styles while Akismet, per-IP rate limits, keyword and IP block lists, duplicate detection, and reCAPTCHA or Turnstile screen for spam, and an optional review queue holds the comment back until a moderator approves it. The site owner then hears about it by email, WeChat, QQ, Telegram, PushPlus, Discord, or Lark, and the commenter receives reply emails. Once published, readers react with up to nine emoji and sort threads by latest, oldest, or hottest, while pageview and comment counters can appear anywhere on a site and recent-comment and top-commenter widgets fill sidebars. Moderators edit, approve, flag, or delete from the web admin panel, manage users and custom labels, and import earlier discussions from Disqus, Twikoo, Valine, Typecho, Artalk, Commento, or WordPress. Comments stay in your own database, and the widget offers a dark theme and ten languages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-2.0 licensed.

Execute comprehensive multi-angle investigations across scientific journals and web repositories using Local Deep Research, an autonomous intelligence engine designed for researchers, analysts, and knowledge workers. Users can submit complex analytical questions through a self-hosted web console to initiate agentic research cycles powered by LangGraph workflows. The application dynamically queries search providers including SearXNG, arXiv, PubMed, Wikipedia, and Google, iteratively evaluating discovered content to formulate targeted follow-up queries. Discovered academic papers and web sources can be indexed into an encrypted personal library to combine internal documentation with external search intelligence. Reports are synthesized with structured outlines, section headings, and verifiable academic citations that link directly to source references. Individual research sessions, system logs, and user credentials remain isolated in per-user SQLCipher databases protected by AES-256 encryption. Automated subscriptions deliver scheduled news digests and topic monitoring summaries directly to connected notification channels. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Twitch and YouTube Live, replaced by infrastructure you control: Owncast is a self-hosted live streaming and chat server. Point OBS, Streamlabs, or any RTMP-capable broadcaster at the server's ingest port, and Owncast transcodes the feed with FFmpeg into HLS with multiple quality variants, playing it in a built-in web page with a real-time chat beside it. Chat supports anonymous participation, custom emotes, and moderation tools - message removal, user bans and suspensions - with optional authentication via IndieAuth or a Fediverse account. ActivityPub integration puts the stream on the Fediverse: viewers on Mastodon and compatible services can follow a channel and get notified the moment it goes live. Video delivery can come straight off the server or offload HLS segments to S3-compatible object storage so a modest VPS handles thousands of concurrent viewers while only managing ingest and chat. The backend is a single Go binary with a React frontend - no accounts platform, no database server, no dependency stack - and the player embeds in any website. MIT-licensed, with roughly 9k GitHub stars, zero platform fees, and no algorithm or takedown policy between you and your audience.

Why rent your messaging from a corporate walled garden when Tinode runs WhatsApp-style chats, groups, channels, and calls on a server you control? Teams get one-on-one and group chats that stay in sync across web, Android, and iOS, with typing indicators, delivery and read receipts, presence, replies, forwarding, editing, pinned messages, and notes to self. Communities broadcast through read-only channels with an unlimited number of subscribers, and granular permissions decide who can read, write, or invite on each topic. Support desks welcome anonymous visitors, mark staff and verified accounts with badges, and put chatbots to work with forms and templated replies. Messages take markdown-style formatting, inline images and videos, file attachments, and voice messages. One-to-one voice and video calls run peer to peer over WebRTC, using the TURN and STUN servers you configure. Administrators block unwanted contacts on the server, attach moderation plugins over gRPC, and script the rest with a command-line tool. Attachments can sit on local disk or Amazon S3, the database can be MySQL, PostgreSQL, or MongoDB, and sharded clustering with failover scales past one server. The clients offer light, dark, and system themes, custom chat wallpapers, and translations for more than a dozen languages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

For people who found del.icio.us perfect and everything since bloated, linkding is the bookmark manager - a Django application whose entire design goal is saving and finding links with zero friction. Paste a URL and it fetches the title, description, favicon, and preview image automatically; organize with tags, search full-text across everything, mark bookmarks unread for read-it-later, attach Markdown notes, and bulk-edit whole selections at once. Its answer to link rot is archiving: bookmarked pages can be snapshotted automatically, either submitted to the Internet Archive or saved as local HTML files, and a documented SingleFile browser-extension integration uploads full self-contained page captures straight to your instance. Official Firefox and Chrome extensions (plus a bookmarklet) make saving a one-click habit, the UI installs as a Progressive Web App on mobile, and multi-user support with bookmark sharing - to users or logged-out guests - covers families and teams, with SSO via OIDC when needed. The REST API (create, search, filter by tag) has spawned a genuine ecosystem of community mobile apps and libraries. Operationally it is famously boring in the best way: one small container, SQLite by default, automated migrations, and a zero-breaking-changes policy. Import and export use standard Netscape HTML. MIT-licensed.

HomeGallery turns the photo and video folders on your server into a mobile-friendly web gallery. Your files and folder structure stay exactly as they are. Point it at camera files, phone files, or offline drives, and previews and metadata are extracted once. Scroll one endless stream, newest first. Open any image for its file name, dimensions, capture date, source paths, camera settings, street address, tags, and detected objects. Swipe between photos, then pinch or double-tap to zoom. The Map view clusters photos by place, with counts. The plant button lists similar images, so one sunset finds every other sunset. Face search finds the same person in other photos. A search box accepts expressions like tags in (vacation, family), type:video year in [2015:2020] order by duration, or not exists(geo). In Edit mode, select many photos at once and type comma-separated tags; a minus prefix removes one. Videos are transcoded for playback. Renamed or moved files keep their previews. An archive disk can stay unplugged once indexing is done. Optional logins limit each user to a query filter. Install it as a PWA for a lightweight mobile app. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Stalled torrents, malware-laced archives, and failed imports can quietly paralyze an automated media server, and Cleanuparr eliminates those bottlenecks as an autonomous download queue manager and library seeker for the entire Servarr ecosystem. Connecting directly to Sonarr, Radarr, Lidarr, Readarr, Whisparr, Sportarr, and LazyLibrarian alongside qBittorrent, Transmission, Deluge, rTorrent, uTorrent, and SABnzbd, its configurable Queue Cleaner tracks slow transfers, stuck metadata downloads, and import failures using a strike system. Once a problematic download reaches its strike threshold or triggers the Malware Blocker against deceptive .lnk and .zipx payloads, Cleanuparr purges the offending files, blocklists the release, and instructs the media manager to search for a clean replacement. Beyond defensive queue hygiene, the built-in Seeker proactively searches your libraries for missing episodes or movies, hunts for Cutoff Unmet quality upgrades, and tracks Custom Format score distributions over time. Storage administrators can also enforce seeding duration limits, clean up orphaned torrents without breaking active cross-seed hardlinks, and quarantine unclaimed directory files before they consume disk capacity. A live web dashboard visualizes manual intervention alerts, strike histories, and searchable application logs while dispatching instant notifications through Apprise, Discord, Gotify, Notifiarr, Ntfy, Pushover, and Telegram. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Unpatched Linux servers expose production environments to critical vulnerabilities, and PatchMon eliminates that blind spot by centralizing package telemetry, security advisory tracking, and automated update orchestration across your entire fleet. Administrators can inspect pending updates across APT, DNF, YUM, APK, Pacman, Zypper, FreeBSD pkg, Windows Update, and winget from one unified queue without opening inbound firewall ports on monitored hosts. Before touching production workloads, operators run dry-run validations to preview exact package transactions, enforce multi-user approval workflows, and schedule rollouts during fixed maintenance windows. During execution, live agent output streams directly to the browser over WebSocket so engineers can watch progress in real time or halt a problematic upgrade mid-flight. Beyond package updates, the platform runs OpenSCAP CIS benchmark and Docker Bench security assessments, inventories running containers and outdated base images, and routes host-down or threshold alerts to Slack, Discord, Microsoft Teams, ntfy, or email. Built-in browser SSH and Apache Guacamole RDP terminals let teams troubleshoot machines directly through the outbound agent tunnel with role-based access control and OIDC single sign-on. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Ever Works transforms a single text prompt into a fully researched, written, coded, and deployed website through autonomous AI agents that operate on a configurable 15-step generation pipeline. Unlike one-shot builders, it continuously improves generated content on a schedule, keeping sites fresh without manual intervention. The platform integrates with six AI providers (OpenAI, Anthropic, Google, Groq, Mistral, Ollama) via gateways like OpenRouter and Vercel AI Gateway, while its plugin system connects ten search providers including Tavily, Brave, Exa, SerpAPI, and Perplexity for deep autonomous research. Every generation is Git-native — code and content live in your own GitHub repositories as commits, providing full version control, portability, and zero vendor lock-in. The monorepo ships a NestJS 11 REST API with JWT authentication, a Next.js 16 web dashboard for managing works, a CLI for terminal operations, an MCP server for AI agent integration, and admin tooling. Content management supports items, categories, tags, and collections, while deployment targets include Vercel and Kubernetes. Background processing runs on Trigger.dev with BullMQ scheduling, and monitoring leverages Sentry plus PostHog for error tracking and product analytics. The platform supports OAuth via GitHub and Google, subscription billing, email notifications, and AI chat conversations for natural-language interaction with your generated works. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

SurveyKing combines survey creation and online examination in a single platform — generate complete questionnaires from plain English via built-in LLM integration, administer timed exams with anti-cheating proctoring, and collect structured data through 20+ question types including matrix questions, cascading selectors, file uploads, and electronic signatures. Built on Spring Boot 3 with a React and TypeScript frontend using the UMI framework and Ant Design components, version 1.12 delivers each question type with independent validation rules, data type controls, and formula calculations. The AI engine connects to mainstream LLMs for survey generation from natural language prompts and provides real-time answer explanations during practice sessions. Exam mode features item banks with Word and Excel bulk import, fixed and randomized question selection, composite paper assembly, live proctoring dashboards with anti-cheating controls, automatic and manual grading with per-question scoring, and PDF score report archiving. The visual logic designer and DSL expression engine handle show/hide conditions, required rules, skip branching, quota controls, randomization, and cross-tabulation analysis with SPSS export. Role-based access controls support multi-user collaboration with department and permission management via Spring Security and JWT authentication. Redis handles caching and queuing while MyBatis Plus manages database operations. Deploy via a single Docker command with embedded H2 for trials or Docker Compose with MySQL for production. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Manga collections tend to get trapped on a single phone; Suwayomi moves the library, downloads, and reading progress onto a server you run, so every browser and device sees the same shelf. In the browser, a built-in reader handles single page, double page, continuous vertical, continuous horizontal, and webtoon layouts, adding image filters, custom keybinds, auto scrolling, and separate desktop and mobile views. Content comes from Mihon (Tachiyomi) extensions, which can be searched, browsed, and sorted into categories, with custom extension stores loaded from JSON or Protobuf indexes. Downloads save chapters as CBZ archives for offline reading, and the server checks the library for new chapters every 12 hours by default, fetching them automatically if you allow it. Progress follows you through MyAnimeList, AniList, and MangaUpdates, a Suwayomi extension and tracker for Mihon, SyncYomi servers, and KOReader. E-reader apps connect over OPDS feeds, scheduled Mihon-compatible backups protect the library, and FlareSolverr or Byparr support handles Cloudflare-protected sources. Public instances can be locked down with basic authentication, a simple login page, or JWT-based UI login, and a PostgreSQL backend, still in beta, can replace the default file store. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MPL-2.0 licensed.

With over 36,000 GitHub stars and adoption by organizations including Adobe, Shopify, and Roblox, HashiCorp Vault is the industry-standard platform for secrets management, encryption services, and privileged access control across hybrid and multi-cloud infrastructure. The key/value secrets engine stores arbitrary secrets with full versioning, soft-delete, and metadata tracking, while dynamic secrets engines generate on-demand, short-lived credentials for AWS, Azure, GCP, databases including PostgreSQL, MySQL, MongoDB, and MSSQL, and SSH access with automatic revocation after configurable lease periods. The PKI secrets engine dynamically issues X.509 certificates on demand with automatic rotation and ACME protocol support, eliminating manual certificate management workflows entirely. Encryption as a service through the transit secrets engine lets applications encrypt, decrypt, sign, verify, and generate HMACs without managing cryptographic keys directly, supporting AES-GCM-256, ChaCha20-Poly1305, RSA-2048/4096, ECDSA-P256/P384, and ED25519 algorithms. Authentication integrates with LDAP, OIDC/OAuth2, SAML, AppRole for machine-to-machine access, Kubernetes service accounts, AWS IAM, Azure Active Directory, and GitHub tokens. Fine-grained ACL policies use path-based rules with glob patterns and sentinel policies for programmatic enforcement. The integrated Raft storage backend provides high-availability clustering without external dependencies, while alternative backends include Consul, S3, DynamoDB, PostgreSQL, and MySQL. The built-in web UI provides a visual interface for browsing secrets, managing policies, configuring auth methods, and monitoring cluster health. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSL 1.1 licensed.

An agent run can finish without errors and still give the wrong answer, so TraceRoot traces every model and tool call, flags the production runs that missed the mark, and helps your coding agent ship verified fixes. Each run becomes a browsable call tree with inputs, outputs, latency, and cost, searchable by session or filter. Instrument with the Python or TypeScript SDK, the agent-native CLI, or any OpenTelemetry exporter, with ready integrations for LangChain, LangGraph, OpenAI Agents SDK, CrewAI, Vercel AI SDK, Mastra, and Pydantic AI. Detectors use LLM judges to score live traffic against the behavior you define and can post alerts to Slack. Judge outputs cluster into signals, then a background coding agent reads the traces and your connected GitHub code in a sandbox and recommends changes down to the commit, file, and line. Datasets, test cases, and scored eval runs compare versions so regressions surface before a release, and dashboards of widgets chart your trace data. The CLI hands your coding agent, such as Claude Code or Codex, the traces, signals, detectors, and evals to work from. Self-hosting keeps all of that trace data on infrastructure you control. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed (core edition).

Krayin CRM gives sales teams a visual Kanban pipeline where leads flow through configurable stages — new, contacted, qualified, proposal, won, lost — with deal values tracked per stage, drag-and-drop transitions, and AI-powered document import that extracts contact details from uploaded PDFs, DOCs, and images without manual data entry. Built on Laravel 12 with a Vue.js frontend and MySQL database, the platform delivers complete customer lifecycle management through a two-stage contact model separating unqualified Leads from qualified Persons linked to Organizations, with a unified timeline displaying associated activities, notes, emails, and deals. The activity module schedules calls, meetings, and tasks on a drag-and-drop calendar with reminders and team assignment. A built-in product catalog supports line-item quoting with pricing and quantities. Email integration connects via SMTP, IMAP, and SendGrid parsing, linked to leads and contacts automatically. Workflow automation triggers actions on conditions and pushes events to external systems via webhooks. The dashboard visualizes pipeline performance, top customers, top products, and email engagement with pie charts and trend widgets. Custom attributes add text, number, date, boolean, and dropdown fields to any entity. Role-based ACLs manage team permissions per module. Extensions add multi-tenant SaaS, WhatsApp lead generation, and VoIP calling. Deploy via Docker Compose. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Command and automate your entire fleet of 3D printers without relying on proprietary cloud services using Bambuddy, a self-hosted management hub that delivers local network control, print scheduling, and job archiving for Bambu Lab hardware. Print shop operators can route slicing output directly from Bambu Studio or Orca Slicer through virtual printer proxies that emulate physical machines while automatically cataloging print files in a searchable 3D repository. The automated dispatch engine assigns queued gcode files to available printers based on required nozzle temperatures, build plate dimensions, and matched multi-color filament slots. Users can inspect live camera streams across multiple printing beds simultaneously, verify empty build plates before dispatching new jobs, and generate stabilized timelapse videos with custom music. Integrated smart plug connectors automatically cut power to idle machines when print cycles finish and trigger push notifications to Discord or mobile devices if thermal anomalies or mechanical pauses occur. Farm managers can schedule maintenance alerts based on cumulative motor runtime, track spool inventory levels across storage locations, and synchronize printing configurations across duplicate hardware setups. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GNU AGPL v3.0 licensed.

With nearly 14,000 GitHub stars and over 200 releases, Semaphore UI has established itself as the lightweight yet powerful alternative to enterprise automation platforms like Ansible AWX and Jenkins. Unlike AWX's heavyweight Kubernetes-dependent architecture, Semaphore ships as a single Go binary with zero external runtime dependencies — install it, run setup, and you have a production-ready automation server in minutes. The platform natively orchestrates Ansible playbooks, Terraform and OpenTofu infrastructure code, Terragrunt configurations, PowerShell scripts, Bash commands, and Python automation, all from a clean Vue.js web interface that displays task history, execution logs, and scheduling status at a glance. Semaphore supports concurrent task execution across multiple servers using distributed project runners, enabling horizontal scaling of automation workloads without complex clustering. The built-in inventory management system handles both static and dynamic inventory sources, while four-level RBAC (Owner, Manager, Task Runner, Guest) provides granular access control for team environments. Notifications flow to Slack, Microsoft Teams, Telegram, email, Rocket.Chat, and Gotify, keeping operators informed of failed tasks and deployment status. Integration with HashiCorp Vault secures sensitive credentials, and the comprehensive REST API with built-in Swagger documentation enables programmatic automation. Deploy via Docker Compose, Helm chart for Kubernetes, or native packages for Debian, Ubuntu, and RHEL-based distributions. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

DCM is a visual builder that eliminates docker-compose copy-paste anxiety for home server enthusiasts. The TypeScript and Next.js web interface on port 7576 presents a curated catalog of popular self-hosted applications organized into categories: media management with Jellyfin, Plex, Sonarr, Radarr, and Prowlarr; dashboards like Homarr and Heimdall; databases including PostgreSQL, MariaDB, MongoDB, and Redis; monitoring stacks with Grafana and Prometheus; download clients like qBittorrent and NZBGet; security tools including Vaultwarden; storage solutions like Nextcloud; and home automation via Home Assistant. Select any combination of containers and DCM generates both compose.yaml and .env files with correct volume mounts, environment variables, PUID/PGID ownership, network modes, and port mappings — ready to paste into your terminal. Automatic port conflict detection identifies clashing services and reassigns ports before you ever hit a deployment error. The Template Gallery ships predefined multi-container stacks for common setups: media servers, development environments, database clusters, and monitoring solutions — some incorporating ten or more services in a single template. Built as a static Next.js export served from a 62 MB multi-arch Docker image supporting amd64, arm64, and arm/v7, DCM runs on everything from rack servers to Raspberry Pis. Share generated configurations via URL or download them locally. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Every production incident starts the same way: someone asks "what do the logs say?" and the answer takes 45 minutes to find. LogTide collapses that search into seconds with a unified observability platform that indexes logs, traces, and metrics into a single queryable interface, backed by your choice of TimescaleDB, ClickHouse, or MongoDB. The log search interface supports full-text queries across millions of entries with filters for trace ID, session ID, project, service, hostname, and severity level, plus a live tail mode that streams new log lines as they arrive. Distributed traces render as waterfall timelines showing every span, its duration, and cross-service dependencies, while correlated logs for each trace are one click away. The metrics explorer visualizes OTLP gauge and counter data from your applications with system CPU, memory, disk, and network panels that update in near real-time. Where LogTide diverges from standard observability is its built-in SIEM engine: Sigma-compatible detection rules scan incoming logs for security threats like SQL injection, privilege escalation, lateral movement, and C2 communication, surfacing findings on a dedicated security dashboard with severity distribution, detection timelines, and affected service breakdowns. Alerting pushes notifications to Email, Slack, or Discord webhooks when thresholds trip or security rules fire. Native SDKs for Node.js, Python, Go, PHP, Kotlin, and Ruby ship logs with retry logic and circuit breakers, and the platform accepts OpenTelemetry data natively. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.