DramaClaw
DramaClaw is a self-hosted production line that carries a manuscript or screenplay all the way to a finished AI drama, handling story structure, characters, storyboards, voices, and final cuts inside one workspace. Drop in a novel manuscript or a Fountain screenplay and it builds episodes, characters, and scenes for you, then plans multi-episode arcs and writes scripts in adaptive, literal, or staged modes with review-and-repair loops. The shared asset library keeps every character, scene, prop, and voice organized once, so faces stay consistent across episodes while portraits and per-episode variants handle costume and age changes. Storyboards and first frames are generated beat by beat, emotion-aware voice-over is synthesized per character, and episodes are assembled and exported with subtitles and the full asset pack. For finer control, the XiaHua canvas gives you 18 node types for images, video, audio, scripts, and 3D sets, with a wall of 45 short-drama styles and tools for relighting, outpainting, upscaling, and camera moves. Xia Director, the built-in agent, turns a plain-language brief into a node graph, runs it with progress tracking, and can promote winning results from the canvas back into the series. You pick the models: paste an official gateway key, or route Seedance, Kling, Hailuo, Sora, ComfyUI, and other channels through the bundled gateway, while external agents drive the same pipeline over MCP. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Elastic License 2.0 licensed.
phpMyFAQ
Publish the answers your team keeps repeating as a multilingual, searchable FAQ with phpMyFAQ, a knowledge base whose admin area handles writing, review, and permissions. Organize entries in nested categories that you rearrange by drag and drop, attach files, add tags and related FAQs, and let visitors leave comments. A WYSIWYG editor with an image manager writes each answer, a wiki-style revision history restores earlier versions, and a news system posts announcements. Full-text search covers every language, and optional Elasticsearch or OpenSearch backends handle larger collections. The interface covers more than 40 languages with right-to-left layouts, automatic content negotiation, and translated categories and entries. Privileges work per user and per group, so an editor can change an entry without being allowed to delete it, and categories can be limited to chosen readers. Sign in through LDAP, Active Directory, or Microsoft Entra ID, protect accounts with two-factor authentication, or try experimental passkeys. The dashboard charts 30 days of visits, lists inactive FAQs, and checks installed files against published hashes. Export entries to PDF, publish a dynamic sitemap, back up your content, and filter spam with built-in protections. Dark, light, and high-contrast themes keep the public site comfortable to read. Scripts and AI assistants reach the knowledge base through a REST API with an OpenAPI specification or an experimental MCP server, and plugins extend it. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MPL-2.0 licensed.
Solidtime
Solidtime is a time tracker for freelancers and agencies, offering a modern SaaS-quality interface that rivals commercial tools like Toggl and Clockify. The time tracking interface provides a running timer, calendar view, and weekly timesheet for flexible entry across desktop, mobile, and the dedicated macOS, Windows, and Linux desktop applications. Project management organizes work by client with hierarchical billable rates configurable at organization, member, project, and project-member levels, ensuring accurate billing across complex team structures. The invoicing module generates polished PDF invoices and structured EU e-invoices with configurable VAT rates, percentage and fixed discounts, EU reverse-charge handling, reusable company templates, and automatic line item generation from billable time entries. Reporting provides filterable summaries by user, project, client, and date range with exportable data for billing audits and team retrospectives. Multi-organization support manages separate workspaces from a single account with role-based permissions controlling access across organizations. Data import from Toggl, Clockify, and generic Timeentry CSV files enables migration from existing tools without losing historical records. The RESTful API with bearer token authentication enables automation and integration with external services. Docker deployment with PostgreSQL runs behind Nginx or Traefik reverse proxy. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
Runtipi
Runtipi makes any Linux server a personal app platform where installing services like Plex, Nextcloud, or Home Assistant takes a single click from a curated store of 265+ applications. With 9,500+ GitHub stars and 50 contributors, the React frontend backed by NestJS orchestrates Docker Compose projects for each installed app, automatically generating environment files, compose configurations, and Traefik reverse proxy labels for domain routing and SSL certificate provisioning via Let's Encrypt. The integrated Traefik reverse proxy handles all incoming traffic routing, HTTPS termination, and forward-auth protection for securing applications behind Runtipi's authentication layer without manual configuration. One-click updates notify administrators of new app versions and apply container image upgrades with automatic pre-update backup creation, while the restore feature rolls back application data to any saved snapshot. Custom app stores extend the ecosystem through Git repositories following the Runtipi app definition format, enabling organizations and communities to maintain private catalogs alongside the official store. The Docker Compose override system preserves user customizations across updates, allowing advanced modifications without losing changes. Architecture-aware filtering detects ARM64 or x86 platforms and displays only compatible applications. All apps deploy as standard Docker containers, and compose files can be exported for independent operation without lock-in. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.
Toonflow
Toonflow, an open-source AI studio for short dramas, animated comics, and short videos, lets you plan, generate, and direct every shot as nodes on a canvas that runs on your own server. Text nodes hold the story, characters, and shot descriptions. Image generation nodes create character sheets with close-up, front, side, and back views. Video generation nodes take numbered reference images. Aspect ratio, resolution, and duration options depend on the selected model. Connectors link the nodes, so a character sheet made once is reusable in every shot. The 3D director's studio blocks a scene with camera framing, lighting, and keyframes. Export the scene as a video node. An assistant panel reads the project and reports which assets and videos have been generated. It offers next steps: generate a shot, revise a prompt, or start a new canvas. Finished images and clips preview on the canvas and download for further production work. Models come from third-party APIs, local ComfyUI workflows, or local language models. Plugins for nodes, skills, tools, and agents install from the marketplace. MCP links external tools and services. Projects, settings, and plugins live in one data directory. The interface offers 21 languages. There is no built-in login, so a firewall or an authenticating reverse proxy decides who can reach it. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
ExcaliDash
ExcaliDash adds persistent storage, access control, version history, and real-time collaboration to Excalidraw, transforming ephemeral whiteboarding sessions into a managed drawing library your team can rely on. The Node.js/Express backend with React/TypeScript frontend deploys via Docker Compose on port 6767, using Prisma ORM on SQLite for all drawings, users, and metadata. WebSocket-powered collaboration lets multiple users edit the same canvas simultaneously with live cursor presence. Drawing snapshots preserve every revision with visual preview and one-click restore to any previous state. Three authentication modes handle different deployment needs: local email/password for personal use, hybrid mode mixing native credentials with OIDC for gradual enterprise adoption, and enforced OIDC-only for organizations requiring SSO through providers like Authentik or Keycloak. Scoped sharing controls determine whether drawings stay private, shared internally with team members, or accessible via external links without authentication. Collections organize drawings through drag-and-drop grouping, full-text search locates any diagram instantly, and exports use the non-proprietary .excalidraw format ensuring complete data portability. 1,350+ stars since November 2025. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
Cozy Cloud
With over 1,200 GitHub stars, 12,000+ commits, and more than a decade of active development distributed under the AGPL-3.0 license, Cozy Cloud operates as a comprehensive personal data hub that goes far beyond file storage by connecting your documents, contacts, calendars, banking transactions, energy bills, and productivity tools into a single self-hosted platform where no third party profiles you. The cozy-stack Go binary handles file storage, CouchDB document management, job scheduling, app serving, and the REST API in a single process consuming approximately 150MB of RAM idle. Sandboxed konnectors import data from 50+ external services — banks, utility providers, telecom operators, cloud drives — running as isolated jobs via nsjail to prevent untrusted code from accessing other user data. The built-in app store serves web applications in subdomain-isolated environments with Content Security Policy headers, each app communicating exclusively through the documented REST API. Real-time synchronization via PouchDB replication and WebSocket keeps files, contacts, and documents consistent across desktop clients, mobile apps for iOS and Android with automatic photo backup, and the web interface. Security features include automatic Let's Encrypt TLS certificates, Argon2id password hashing, optional TOTP two-factor authentication, and GDPR-compliant data export via the CLI. Each user receives their own isolated instance with independent storage, database, and application configuration. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
Manyfold
3D printing enthusiasts who accumulate thousands of downloaded STL, 3MF, STEP, and OBJ archives across disorganized folders can index, preview, and catalog their entire library with Manyfold, a self-hosted digital asset manager purpose-built for additive manufacturing. Point it at an existing local directory or an S3-compatible bucket and it automatically scans nested folders, groups multi-part meshes into unified model entries, and renders interactive 3D previews right in your browser. You can organize assets by creator, collection, tag, and scale, distinguish between pre-supported and unsupported resin files, and import rich metadata directly from Thingiverse, Printables, Cults3D, and MyMiniFactory. Built-in troubleshooting tools flag duplicate meshes, manifold geometry errors, and inefficient file formats, while customizable file-naming templates reorganize messy directory trees on disk with a single click. Ready to print? Open models directly in OrcaSlicer, PrusaSlicer, or UltiMaker Cura, or transmit sliced G-code straight to OctoPrint and Moonraker printers. Multi-user access control and native ActivityPub federation let you share public collections and follow remote creators across the Fediverse. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
Tapflow
Tapflow puts your team's iOS simulators and Android emulators in every teammate's browser, so QA stops queueing for the one Mac that happens to have the right build installed. A relay server you host serves the dashboard and API, stores your builds and recordings, and keeps accounts and device control on infrastructure you own. Agents on your Macs connect out to the relay and drive the simulators already installed there, injecting touches directly without WebDriverAgent or any cloud device pool. From the browser you tap, swipe, and pinch at about 30 frames per second, open deeplinks from the QA toolbar, sync the clipboard both ways, hear device audio, and cut the network to see how the app copes offline. The App Center takes .app.zip and .apk uploads and tracks each build from backlog to done, and sessions can be recorded and shared before the relay purges them after about 72 hours. CI pipelines and AI agents get a screenshot endpoint and scoped access tokens, deterministic YAML flows replay checks with a JUnit report, and roles keep viewers, QA, developers, and admins in their lanes. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Harbor
The first container registry to reach CNCF graduated status with over 29,000 GitHub stars since VMware open-sourced it in 2016, Harbor transforms the basic Docker Distribution into a hardened enterprise registry with vulnerability scanning, supply chain signing, multi-datacenter replication, and project-level access control out of the box. Trivy scans every pushed image against the NVD, GitHub Advisory Database, and distribution-specific vulnerability feeds, with scan-on-push policies that block deployment of images exceeding configurable severity thresholds. Artifact signing through Cosign keyless signatures and Notation enforces content trust policies ensuring only cryptographically verified images reach production clusters. Policy-based replication synchronizes images and Helm charts between Harbor instances across multiple datacenters using repository, tag, and label filters with automatic retry and bandwidth throttling — enabling hybrid-cloud and disaster-recovery topologies. The RBAC model isolates projects with per-project quotas, robot accounts for CI/CD automation, webhook notifications, and audit logging that tracks every pull, push, delete, and configuration change. LDAP, Active Directory, and OIDC authentication integrate with existing identity providers, while the proxy cache transparently caches images from Docker Hub, Quay, and other upstream registries to reduce pull latency and rate-limit exposure. The RESTful API with embedded Swagger UI, tag retention policies, garbage collection scheduling, and immutable artifact rules complete the lifecycle management. Deploy via Docker Compose or Helm Chart on Kubernetes. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.
Review Board
Before a change lands in the main branch, Review Board gives your team a self-hosted code review server where reviewers read the diff, open issues on specific lines, and sign off with a Ship It. Post a review request from the web or with RBTools, either before you commit or after, and every update becomes a new revision that stays in the history. Interdiffs show exactly what changed between revisions, and moved-code detection keeps rearranged blocks from drowning out real edits. Comments can open issues that reviewers later mark fixed or dropped. Images and Markdown files can be reviewed alongside code, with split, onion-skin, color, and side-by-side diffs for pictures. A dashboard with customizable columns separates incoming from outgoing requests by review group. Connect Git, Mercurial, Subversion, or Perforce repositories, including ones hosted on GitHub or GitLab, and review them all on one server. Slack and Discord notifications, Jenkins builds, and Review Bot linters report back inside the review. Private repositories and hidden or invite-only review groups restrict who sees what, with sign-in through Active Directory, LDAP, or SAML 2.0. A REST API, WebHooks, and Python extensions cover custom workflows. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
EverShop
Magento's extensibility without PHP, Shopify's polish without the platform tax: EverShop is the TypeScript-first e-commerce platform built on that promise. Architected as a modular monolith on Node.js, it organizes every piece of business logic - catalog, checkout, customers, your custom extensions - into modules that plug in without touching core code, extended through a disciplined set of mechanisms: registry processors for transforming data across modules, hooks that wrap function calls, async event subscribers (product created, order placed), and route middleware. The storefront and the fully-featured admin panel are both React with server-side rendering and hydration, giving fast first paint and SEO-friendly pages, while a typed GraphQL API (plus REST endpoints) serves exactly the data each view needs - the same API that powers headless and PWA builds. Standard commerce is covered: product management with variants and attributes, category navigation, cart and checkout, order and customer management, coupons, and a theme system built on React components and Tailwind for deep storefront customization. PostgreSQL is the default database, deployment is Docker-friendly with near-zero configuration, and the GPL-3.0 license means the entire stack - types, resolvers, and checkout flow included - is yours to read and modify.
Modoboa
Modoboa turns a bare mail server into a managed hosting platform, with one web console for domains, mailboxes, aliases, and quotas, plus a full webmail for the people using them. Roles separate super administrators, resellers, domain administrators, and ordinary users, with caps on how many mailboxes and aliases each administrator may create and daily sending limits per domain or mailbox. The webmail offers conversation view, folder subscriptions, scheduled sending, attachments, and search across headers and message bodies. Calendars and address books sync with standard clients, and calendars can be shared. Each user writes Sieve filters and autoreplies in the browser. Deliverability checks cover MX records and DNSBL listings, DKIM keys are generated per domain, and DMARC aggregate reports become per-domain visual reports. Amavis quarantine pages and an Rspamd frontend help with spam. Traffic graphs show message volume. Accounts authenticate against the local database, LDAP, Active Directory, or an existing SMTP server, with TOTP codes or WebAuthn security keys as a second factor. Thunderbird and Outlook configure themselves through built-in autoconfig and autodiscover endpoints. An IMAP migration tool pulls mailboxes from another provider as each person signs in. Administrators can brand the console with custom logos, extend it through plugins, and automate it through a documented REST API. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. ISC licensed.
Microcks
Microcks turns your API specifications into living mocks and contract tests, so teams can develop and verify against an API long before the real implementation exists. Feed it OpenAPI, AsyncAPI, GraphQL schemas, gRPC Protobuf files, Postman collections, or SoapUI projects, and it immediately publishes mock endpoints that answer with realistic examples drawn from the specification itself. Dispatching rules route requests by path, query parameters, headers, body content, or XPath and Groovy expressions, while content negotiation and templating functions shape each response to look convincingly real. Event-driven APIs get the same treatment, with AsyncAPI mocks that publish messages to Kafka topics or WebSocket channels your consumers can subscribe to during development. When an implementation shows up, contract tests replay the recorded expectations against the live service and report every mismatch, down to the exact request and response that failed. Run those tests from the web interface, on a schedule, or from CI pipelines with the command-line client, and wire importers to rescan your Git repositories so new specification versions appear as mocks automatically. The built-in hub adds one-click samples and reusable API packages, giving a new team a stocked repository of mockable services within minutes of the first login. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.
DockPanel
Created in March 2026 and rapidly gaining traction in self-hosting communities, DockPanel delivers the most feature-dense free server panel available — 811 API endpoints, 153 one-click Docker app templates across 14 categories, and full multi-server management, all running on three Rust binaries consuming under 50MB of combined RAM. The panel handles the complete server lifecycle: sites with automatic SSL via Let's Encrypt, MySQL and PostgreSQL databases in Docker containers, Git push-to-deploy using Nixpacks for automatic language detection without Dockerfiles, blue-green zero-downtime deployments with automatic rollback on failed health checks, DNS management, mail servers, monitoring dashboards, and encrypted backups to S3, SFTP, Backblaze B2, or Google Cloud Storage. Security receives production-grade attention with per-image CVE scanning that gates deployments, a built-in WAF, passkey authentication alongside Argon2 password hashing, HttpOnly JWT sessions with blacklist-on-logout, rate limiting on auth endpoints, and fail2ban integration — all verified through an 18-vulnerability pentest with zero remaining issues. Infrastructure as Code support exports your entire server configuration to YAML, and the developer CLI provides status, diagnose, and export commands for automation. GPU passthrough enables AI workload hosting, reseller accounts support white-label branding for agencies, and ARM64 compatibility covers Raspberry Pi and Oracle Cloud free-tier deployments. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
Mage
Backed by 8,700+ GitHub stars and designed as a modern alternative to Apache Airflow, Mage delivers the open-source data pipeline platform that combines the interactive flexibility of notebooks with production-grade orchestration in a single self-hosted environment accessible at port 6789. The modular block architecture lets data engineers compose pipelines from Python, SQL, and R code blocks with instant data previews, live execution logs, and visual debugging at each step. Over 100 prebuilt integrations connect sources and destinations including PostgreSQL, MySQL, Snowflake, BigQuery, Redshift, S3, Kafka, MongoDB, Amplitude, Salesforce, and Stripe with parallel stream synchronization for high-throughput data movement. Batch pipelines run on cron schedules or event triggers while streaming pipelines process real-time data from Kafka, Kinesis, and RabbitMQ with stream mode reducing memory usage by approximately 90 percent compared to batch processing. Native dbt integration builds, tests, and runs dbt models directly inside the pipeline editor alongside custom transformation blocks. Spark, Snowpark, and Databricks runtimes handle large-scale distributed processing. AI-assisted development generates code, fixes errors, and optimizes queries within the notebook interface. Monitoring dashboards track pipeline health with integrations to Datadog, Prometheus, New Relic, and OpenTelemetry. Terraform templates deploy production environments to AWS, GCP, or Azure with two commands, while Helm charts support Kubernetes clusters. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.
Glass Keep
With nearly 600 GitHub stars and a feature set that rivals commercial note apps, Glass Keep is the self-hosted Google Keep alternative that wraps a full-featured notes system in a glassmorphism UI with blurred backdrops, translucent modals, and smooth transitions. The React and Vite frontend renders notes in a masonry card grid with pinning, color themes, tag chips, and drag-and-drop reordering. Text notes support Markdown with headings, bold, italic, strikethrough, blockquotes, and fenced code blocks, while checklists offer inline editing, drag-to-reorder items, and direct toggle from the grid without opening the note. A freehand drawing mode provides customizable brush sizes and colors for handwritten notes. The private AI assistant runs an optimized Llama 3.2 (1B) model entirely inside the Docker container using RAG over your own notes, answering queries like "what are my AWS commands?" without any data leaving your server. Deep search spans titles, Markdown text, tags, checklist items, and image names. Import notes from Google Keep via Takeout JSON files or export your entire vault as JSON with per-note Markdown downloads. The Express backend with better-sqlite3 requires no external database. Real-time collaboration enables shared checklists with live item toggling. Dark and light themes persist across sessions, and the PWA manifest supports installation on any device. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Levelrail
Push to git, watch the deploy go live over HTTPS, and roll back in one click, all on servers you own: Levelrail is a self-hosted platform for running apps and databases without Kubernetes. Deploys start from GitHub, GitLab, Bitbucket, or Gitea webhooks and build from a Dockerfile, Compose file, image, or framework preset such as Next.js, Go, React, or Spring Boot, with preview environments per pull request, canary and blue-green rollouts, approvals, and freezes. Embedded Caddy gives every app a domain with HTTPS: self-signed by default, Let's Encrypt with one toggle, a free sslip.io address when no domain exists, or your own uploaded certificate. Provision Postgres, MySQL, MariaDB, MongoDB, Redis, ClickHouse, and more with scheduled backups that are re-downloaded and verified, Postgres point-in-time recovery, and password rotation. Metrics with deploy markers, searchable live logs, alerts, and a public status page need no separate monitoring stack. Roughly 360 one-click templates and a Cmd+K search across apps, databases, and nodes speed up daily work. Extra servers enroll with a one-time token and a reverse-dialed agent that needs no inbound ports. Sign in with passkeys, TOTP, OAuth from 20 providers, or OIDC, then scope access with IAM policies, encrypted secrets, and a tamper-evident audit log. A CLI, HTTP API, and MCP server let scripts and coding agents deploy and roll back. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.