TriliumNext organizes notes in an infinitely deep tree where any single note can be cloned into multiple branches without duplication, building personal knowledge bases that mirror how ideas actually connect rather than forcing a single rigid folder hierarchy. Carrying forward the original Trilium project under active community stewardship with nearly 37,000 GitHub stars, the application is built on TypeScript with a CKEditor 5 WYSIWYG editor supporting rich text, tables, images, KaTeX math expressions, Mermaid diagrams, Excalidraw canvases, mind maps, spreadsheets with XLSX and CSV import/export, and code blocks with full syntax highlighting. A built-in JavaScript scripting engine runs on both frontend and backend, enabling custom widgets, automated workflows, scheduled tasks, and direct interaction with external REST services through a typed Script API. Full-text and fuzzy search with attribute-based queries locates any note instantly across databases tested at over 100,000 notes without performance degradation. The v0.104 release introduced importers for OneNote, Notion, Google Keep, Anytype, and Obsidian alongside 16 dedicated security fixes. Per-note AES encryption, OpenID Connect authentication, and TOTP two-factor protection safeguard sensitive content. The sync server keeps desktop clients, the progressive web app, and mobile devices in lockstep with zero third-party cloud dependency. Web Clipper captures content directly from browsers. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Support teams, IT departments, and researchers can put their own documents behind chatbots and AI agents built with MaxKB, an open-source platform that grounds answers in private knowledge. A support lead starts by uploading Markdown, DOCX, PDF, TXT, HTML, XLSX, XLS, or CSV files, or by syncing a web site, and MaxKB splits, vectorizes, and indexes the content on its own. An IT department can place the finished agent in any third-party site or internal tool with no coding, as a full-screen page, a mobile view, or a floating chat window. Researchers get replies that show, and let them download, the knowledge sources behind each answer. Simple agents pick tools, skills, and MCP connections from the question itself, while advanced agents are drawn as workflows with branching, multi-path recall, loops, and variables. Custom scripts, which AI can help write, plus schedules and event triggers extend what an agent can do. The model manager registers local models such as DeepSeek, Llama, and Qwen beside providers such as OpenAI, Claude, and Gemini, across language, embedding, reranking, vision, speech, and image generation. Conversation logs feed analysis for operations. Dozens of ready-made agent templates, knowledge base templates, tools, and skills in the template center and tool store shorten the first build. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Type a sentence like 'draw a seaside lighthouse under moonlight, with a small sailboat and stars' and Draw Agent Studio sketches it on a live canvas you can then keep editing by chat. Follow-up messages move objects, change colors, delete elements, and undo or redo steps, so refining a diagram becomes a conversation instead of a wrestling match with shape handles. The same canvas accepts direct manual work: select and drag shapes, draw freehand with the pen, or drop text onto the page to finish details the model missed. Researchers and writers use it to build flowcharts from a paragraph of method notes, grouping stages, adding quality checks and feedback loops, and restructuring sections on request. Canvases save automatically as you work, and finished pieces export as PNG, JPG, WebP, or SVG images, or as editable Excalidraw files for further hand editing elsewhere. You bring your own model connection, choosing OpenAI, Claude, Gemini, Azure OpenAI, Ark, DeepSeek, Kimi, Groq, OpenRouter, Bedrock, Vertex AI, or a local Ollama or OpenAI-compatible endpoint. A built-in connection test sends a real image and verifies recognition and tool calling before you save, and your API keys stay encrypted on the server rather than in the browser. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Moltis gives individuals and teams a completely private personal AI agent server that bridges conversational assistants to everyday messaging platforms while executing real-world computing tasks inside secure execution environments. Users can interact with autonomous agents across Telegram, Discord, WhatsApp, Slack, Matrix, and browser interfaces to draft correspondence, automate research, and schedule recurring cron tasks. The system coordinates multi-agent delegation by spinning up specialized sub-agents with dedicated roles for code generation, pull request reviews, quality assurance testing, and technical documentation. Built-in sandboxing isolates tool operations within container boundaries or WebAssembly modules, ensuring shell commands, web scraping routines, and script executions cannot alter underlying operating system files without explicit permission. Native Model Context Protocol integration allows operators to attach external data endpoints, database connectors, and custom command-line utilities without rewriting core routing logic. Persistent memory preserves conversational context and document embeddings across multiple sessions, allowing assistants to recall prior discussions, user preferences, and project guidelines indefinitely. Administrators can configure granular tool approvals, manage WebAuthn passkey authentication, and review real-time WebSocket communication logs through an embedded control panel. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

With 23,600 GitHub stars, 13 million monthly PyPI downloads, and 425+ contributors automating over 200 million data tasks monthly for Fortune 50 companies like Progressive Insurance and disruptors like Cash App, Prefect is the most widely deployed open-source workflow orchestration framework for Python — turning any script into a resilient production pipeline with a single @flow decorator while eliminating rigid DAG structures entirely. The durable execution engine persists task results and automatically resumes from failures without replaying expensive upstream work, guaranteeing exactly-once execution for any Python function. Event-driven automation triggers workflows from webhooks, cloud events, or state changes through a real-time event bus that detects what happens or fails to happen across your entire data platform. Work pools decouple workflow code from infrastructure, enabling seamless switching between Docker, Kubernetes, AWS ECS, Azure Container Instances, GCP Cloud Run, and serverless environments without modifying pipeline logic. Native Ray and Dask task runners extend execution across clusters for compute-intensive workloads. The self-hosted server provides a monitoring dashboard with flow run timelines, task state visualization, scheduling, and automation configuration. The third-generation engine reduces overhead by over 90 percent compared to Prefect 2, supporting batch, event-driven, interactive, and background task workflows. Deploy via Docker Compose with PostgreSQL, Redis, server, background services, and worker containers, or use official Helm charts for production Kubernetes. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

MediaMTX sits between cameras and viewers as a self-hosted live media server, taking in video and audio streams over one protocol and handing them back out over another, so one IP camera feed can end up playing in a browser, a phone app, and a recording archive simultaneously. Publish with FFmpeg, GStreamer, OBS Studio, a browser, or a Raspberry Pi camera over RTSP, RTMP, SRT, WebRTC, Media-over-QUIC, HLS, MPEG-TS, or RTP, and read it back on any other protocol without a transcoding pipeline. Run dozens of camera feeds side by side, each on its own path, and keep every path available even while its publisher is offline. Record everything to disk in fMP4 or MPEG-TS as it streams, then play recordings back later through the same server instead of shipping files around. Authenticate publishers and viewers with built-in users, an external HTTP check, or JWT, and use the control API plus Prometheus metrics to wire the server into the rest of your monitoring stack. Forward streams to other servers, proxy cameras behind NAT, and fire hook commands whenever a client connects, publishes, or disconnects, so a doorbell camera can trigger a snapshot or an alert as it starts streaming. Reload the configuration while clients stay connected, and tune everything from the same mediamtx.yml file or environment variables, with no database or runtime dependencies to babysit. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Real-time alerts from your own infrastructure to your phone, with no Firebase, Pushover, or third-party push service in the path: Gotify is a simple, self-hosted notification server written in Go. The model is deliberately minimal: senders push messages with a single HTTP POST to the REST API, receivers subscribe over a WebSocket stream, and a clean React web UI manages the pieces. Senders are namespaced as "applications," each with its own token, so your backup script, Uptime Kuma, CI pipeline, and cron jobs each get an identity, an icon, and independently revocable credentials - centralized alerting from many services with per-source management. Messages carry a title, body, and priority level that maps to notification importance on the client. The official Android app (on both F-Droid and Google Play, notable for working entirely without Google Play Services) shows push notifications for new messages; the web UI itself supports Web Push in the browser; and gotify/cli pushes messages from shell scripts with one command. A server-side plugin system adds custom behavior, and the whole thing runs as a single small binary with SQLite by default - near-zero resource footprint. Because dozens of tools (and Apprise) speak Gotify natively, it slots in as the notification hub for an entire homelab or ops stack.

Instead of handing your reading history to a retail platform and letting an algorithm decide what you read next, BookWyrm lets a self-hosted community of readers make the recommendations. Shelve every book as to-read, currently reading, stopped, or finished, record start and finish dates with progress updates along the way, and set an annual reading goal to keep the habit honest. Rate and review finished books, drop a comment while you are mid-chapter, or save a quotation worth keeping, and all of it can appear on the book page alongside reviews aggregated from other connected instances. Follow friends to see their shelves fill up, join a group to build a shared reading list, or create your own list and choose whether it stays closed, accepts suggestions for approval, opens to everyone, or belongs to the group. Posts, shelves, and lists each carry their own privacy level, public, unlisted, followers-only, or private, and you can approve followers by hand before they see anything. Because instances federate over ActivityPub, your readers can follow you from another BookWyrm community or straight from Mastodon, and book metadata is shared between servers so small instances do not catalog alone. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Anti-Capitalist Software License licensed.

A video too large for Discord, a secret that should not live in a chat log, or a config file a headless server needs to fetch: MicroBin turns each into a short link with an animal name, served from your own machine. Paste text or code and it comes back with syntax highlighting, inline image and video embedding, and a QR code for moving it to a phone. Attach one file or several, then decide exactly who can see them: uploads can be public or private, editable or locked, set to expire on a schedule or to never expire. For sensitive material, server-side encryption and client-side end-to-end encryption keep contents unreadable without the password. Raw serving hands the plain bytes to curl, a browser, or another program, which makes the same box a tiny file endpoint for scripts and test rigs. A postbox mode lets people send you files and texts they cannot browse or delete afterwards, and a read-only mode with an uploader password turns the instance into a drop point with exactly one trusted sender. The admin console lists uploads and storage, and everything runs as one small binary backed by SQLite or a JSON file, comfortable in a few megabytes of memory. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-3-Clause licensed.

Controlling Klipper-powered 3D printers from a single browser workspace, Mainsail delivers a responsive web interface for monitoring print jobs, tuning kinematics, and managing multi-printer farms in real time. Makers and print farm operators monitor extruder and heated bed temperatures, fan speeds, and toolhead coordinates live on customizable dashboard layouts. An integrated file manager and syntax-highlighted editor let you upload G-Code directly from your slicer, organize print job queues, and modify Klipper configuration files (`printer.cfg`) without opening an SSH terminal. Interactive 3D visualizations render bed mesh heightmaps for first-layer leveling diagnostics alongside a real-time 3D G-Code toolpath viewer that tracks layer progress. Multi-webcam streaming, automated timelapse recording through `moonraker-timelapse`, Spoolman filament spool tracking, and mid-print object exclusion help salvage multi-part plates when a single model detaches. You can also organize parameterized Klipper macros, switch smart relays or Tasmota power plugs, and audit historical job success rates and filament consumption. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Transforming scattered spatial files into an interactive data catalog, GeoLens empowers engineering and GIS teams to organize geospatial assets, execute semantic searches, and build interactive 3D maps on self-hosted infrastructure. Users can ingest shapefiles, GeoJSON boundaries, database tables, and Cloud-Optimized GeoTIFF rasters into a centralized inventory with automatic source freshness auditing. Natural language queries evaluate dataset relevance across spatial boundaries and thematic tags, allowing analysts to uncover hydrology networks or zoning footprints without knowing exact layer names. The browser-based composition canvas lets cartographers extrude three-dimensional building footprints, overlay elevation terrain contours, color features by attribute values, and reorder layer hierarchies with drag-and-drop ease. Finished map projects publish immediately as secure shareable web links or responsive embeds for external dashboards. Desktop GIS operators can connect directly from QGIS or ArcGIS through native OGC API Features and STAC endpoints to query live vector tiles and run spatial filters. Teams can export filtered geometries into GeoPackage, FlatGeobuf, GeoParquet, or PMTiles archives to support downstream analysis workflows. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

With over 110,000 GitHub stars and one of the fastest-growing open-source communities in the self-hosted space, Immich delivers a Google Photos-grade experience entirely on your own hardware. The platform handles automatic background backup from Android and iOS devices, deduplication, and support for RAW formats, LivePhotos, and MotionPhotos. Its machine learning pipeline runs facial recognition and clustering locally on your server, enabling you to group photos by person without sending a single image to the cloud. CLIP-based semantic search lets you find images by describing their content in natural language, while metadata-driven search covers EXIF data, dates, and locations. The web interface built with SvelteKit provides a responsive timeline view, albums, shared albums with configurable permissions, public sharing links with optional passwords and expiry dates, partner sharing for family libraries, and a global map plotting photos by GPS coordinates. Administrative features include multi-user support with per-user storage quotas, OAuth integration, API key management, and a user-defined storage structure for organizing files on disk. The architecture uses PostgreSQL for metadata, Redis with BullMQ for background job queues handling thumbnail generation, video transcoding, and smart search indexing, and exposes over 400 REST API endpoints documented via OpenAPI with auto-generated SDKs for web, mobile, and CLI clients. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

What Jellyfin is for video, Komga is for comics, manga, BDs, magazines, and eBooks: point it at folders of CBZ, CBR, CBT, PDF, and EPUB files and it becomes a proper library with cover art, embedded metadata import, and per-user reading progress. The responsive web reader handles multiple reading modes - left-to-right for western comics, right-to-left for manga, webtoon scrolling - while collections and read lists organize crossovers and story arcs, with ComicRack .cbl read list import for existing curation. Its openness is the real differentiator: OPDS v1.2 and v2.0 feeds serve virtually every reader app (Panels, Moon+ Reader, Mihon/Tachiyomi, KyBook), with OpenSearch and page-streaming extensions so mobile apps fetch pages on demand instead of whole archives. E-ink support is built in, not bolted on - Kobo devices sync directly against Komga instead of Kobo's servers, with two-way read progress, on-the-fly KEPUB conversion via Kepubify, and optional proxying so official Kobo purchases still work; KOReader sync covers everything else. Multi-user management brings per-library access control, age restrictions, and label restrictions for family setups. Housekeeping tools detect duplicate files and duplicate pages, and a REST API feeds a healthy ecosystem of community scripts. Runs from a single Docker container with embedded SQLite.

With over 20,000 GitHub stars and adoption by companies building everything from telehealth platforms to AI voice agents, LiveKit is the most widely deployed open-source real-time communication server available. The Go-based Selective Forwarding Unit handles hundreds of concurrent participants per node with adaptive bitrate streaming, simulcast layers, SVC codec support for VP9 and AV1, and end-to-end encryption. Client SDKs span JavaScript, Swift, Kotlin, Flutter, React Native, Rust, Python, Unity, and ESP32 embedded devices, while server-side APIs cover Node.js, Go, Ruby, Java, Python, Rust, PHP, and .NET. The Agents framework enables building AI-powered voice and video applications — real-time speech-to-text, LLM-driven conversations, and computer vision pipelines — running as server-side participants in any room. Egress records sessions to S3-compatible storage or streams to RTMP endpoints, while Ingress pulls external feeds from OBS via RTMP, WHIP, or SRT into LiveKit rooms. The SIP bridge connects traditional telephony to WebRTC rooms for hybrid conferencing. JWT-based authentication, webhook notifications, room-level moderation APIs, and selective subscription give operators granular control. Deploy as a single binary for development, Docker Compose for production single-node, or Kubernetes with the official Helm chart for distributed multi-region clusters using Redis for state coordination. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Consolidate daily to-do lists, encrypted passwords, household spending, contacts, and family photo galleries into Personal Management System, a self-hosted private command center for everyday life. Individuals can organize recurring schedules and calendar milestones with proactive notification alerts so important appointments, vehicle servicing dates, and recurring bill renewals are never overlooked. Users can balance household budgets and track expenditure across custom spending categories, calculating monthly cash flow balances while monitoring debts owed to friends or family members. Privacy-conscious users can safeguard account credentials inside an encrypted password vault featuring quick-copy buttons and secondary lock protection for sensitive personal entries. Goal setters can track multi-step personal targets and link financial milestones directly to dedicated savings pools. Home organizers can catalog contacts, log travel destinations with mapped imagery, and maintain categorized notes containing voice memos, bookmarks, and reference materials. Collectors can sort family photos and video recordings into interactive masonry galleries with built-in lightbox previews and file download tools. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

One admin backend can run a single online shop or a whole marketplace of independent sellers. The dashboard shows the latest orders and sales graphs. Panels cover products, stock, customers, subscriptions, orders, suppliers, and coupons. Aimeos handles bundle, voucher, virtual, configurable, custom, and event products. Block and tier pricing work out of the box. Discounts, vouchers, and a flexible basket rule system are built in. Subscriptions renew through recurring payments. Checkout offers more than 100 payment gateways. Storefronts come in 30+ languages, with full right-to-left support and AI-based text translation. Rich snippets help search engines read product pages, and layouts are optimized for phones and tablets. Switch on multi-vendor mode and sellers can register themselves, then manage their own site as administrators or as editors with limited rights. A JSON REST API following jsonapi.org feeds custom frontends, progressive web apps, and native mobile apps. A GraphQL API handles administration. The built-in MCP server lets AI assistants such as Claude or ChatGPT search, create, update, and delete products, orders, and customers within the permissions of the account that connects. Prisma brings AI into the admin interface to write product descriptions, translate content, generate images, and remove backgrounds with the provider you choose. Every component is modular, so any part can be extended or replaced. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT and LGPLv3 licensed.

Workplace and Yammer's pattern on your own server, with GDPR compliance by construction rather than contract: HumHub is an open-source enterprise social network from Germany. Built in PHP on Yii2, it organizes everything around four concepts. Users get rich profiles with follows and interactions. Spaces are the structural unit - rooms for departments, projects, events, or clubs, with per-Space permissions, notification settings, and email summaries, and operators can auto-map users into the right Spaces. Content covers posts, wiki pages, photos and video, events, and tasks, with multi-level comments, versioning, archiving, moderation reporting, and filterable full-text search across everything. Modules make it a platform: roughly 80 install-and-activate extensions including Calendar, Wiki, Polls, Tasks, Gallery, News, direct-message Mail, OnlyOffice document editing, Advanced LDAP, SAML and JWT SSO, a RESTful API, mass user import, Translation Manager, and a Theme Builder with custom pages - every one optional and toggleable at runtime. That module economy is why HumHub serves such varied deployments: corporate intranets, city governments, universities, political parties, and nonprofits all configure the same core differently. Requirements are a plain LAMP stack - PHP 8.1+ and MySQL/MariaDB - making it one of the easiest community platforms to operate long-term.

Bisibility puts your Google rankings, keyword research, and backlink profile in one application that runs on your server instead of behind a per-seat subscription. Track every keyword by market and device, watch positions move over time, and open the stored snapshot of the actual results page behind any check to see exactly what Google showed. Alerts flag the movements that matter, while competitor share of voice shows whose visibility is growing at your expense. The keyword explorer surfaces suggestions with search volume, trends, cost per click, difficulty, and intent, and shows the estimated price before a lookup runs, so research never surprises your wallet. Backlink and domain views break down referring domains, anchors, and new and lost links next to estimated traffic and top pages for any site you type in. Search Console clicks, impressions, and queries are kept beyond the usual retention window, and a recurring prompt tracker follows how AI answer engines cite your brand over time. Results flow outward through a versioned API, MCP access, signed webhooks, and CSV exports. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.