Companies with privacy and security concerns about piping customer conversations through Intercom or Zendesk run Papercups - open-source live customer chat. The stack is a deliberate strength: an Elixir/Phoenix API over PostgreSQL, with real-time messaging powered by Phoenix Channels and Presence - the same BEAM foundation trusted by Discord and PagerDuty for fault-tolerant, low-latency messaging. Customers see a customizable chat widget that embeds in any site as an HTML snippet, a React component, or even inside React Native apps, with configurable colors, greetings, and away messages. Your team sees a dashboard for managing conversations - close, assign, and prioritize - with Markdown and emoji in replies. The killer workflow is the reply-channel integration: connect Slack or Mattermost and every customer conversation becomes a synced thread your team answers without leaving the tool they already live in, with two-way message syncing handled by webhooks. Email and SMS channels extend intake beyond the widget, an analytics dashboard tracks communication patterns, and the Storytime feature adds real-time screen sharing to watch users navigate while you help them. A documented API supports fully custom chat UIs in Svelte, Flutter, or Vue. MIT-licensed and GDPR-conscious - customer data stays in your PostgreSQL.

Mapping every physical server, virtual machine, container, and network link across a sprawling homelab into a live interactive canvas, Circuit Breaker gives infrastructure operators real-time topology visualization, IP address management, and rack elevation modeling on a single screen. Operators can switch between hierarchical, concentric, cortex ring, radial, and force-directed graph layouts where animated edges reflect link speeds and color-coded status rings display live hardware health. Automated discovery scans local subnets using nmap, SNMP, and ARP while querying Proxmox VE clusters, TrueNAS storage pools, and UniFi controllers, staging newly detected nodes in a review queue before adding them to the map. For multi-site labs or isolated VLANs, lightweight remote agents connect outbound over Noise-encrypted links after fingerprint approval to report host telemetry and run scoped network scans without opening inbound firewall ports. Rack diagrams let administrators drag servers into U slots with cabling overlays using a built-in catalog covering Dell, HPE, Supermicro, Ubiquiti, MikroTik, Synology, and APC gear alongside live iDRAC, iLO, and UPS metrics. Role-based access control, OIDC single sign-on, TOTP multi-factor authentication, encrypted full-state snapshots, and a SHA-256 hash-chained audit log keep multi-user operations accountable. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Documents, tables, files, chat, and video meetings share one workspace in atomic.place, and AtomicServer is the part you host yourself so a team can edit together while the data stays on a machine it controls. Documents are collaborative rich text with comments, icons, and cover images, tables enforce a strict schema with keyboard navigation and copy and paste, and any table can switch to a kanban, calendar, dashboard, or timer view. Templates start an issue tracker, a CRM, a project task list, or a time tracker. Live cursors, typing indicators, and presence avatars show who is working where, group channels carry attachments, replies, and search, and an infinite canvas can be drawn on together. Every write is a signed commit, so a full history is kept. Read and write rights follow the resource hierarchy, and invite links bring people in. Websites are designed in the browser, published in one click, and rolled back to any earlier version. Custom classes and properties come from the Ontology Editor, small apps are plain JavaScript screens over the same data, and AI features work with any model through OpenRouter or a local Ollama and support MCP. Typeahead search suggests results as you type. A REST API answers in JSON-AD, Turtle, or JSON-LD for automation, and export and import commands write and read JSON-AD backups. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

libSQL bridges the gap between SQLite's legendary simplicity and the server-accessible database model developers expect from PostgreSQL and MySQL, adding network access, replication, and vector search while maintaining full file format and API compatibility. The sqld (SQL daemon) component transforms SQLite into a network-accessible database server accepting queries via HTTP with JSON payloads, WebSocket connections, and a Hrana protocol optimized for low-latency edge access. Client libraries for TypeScript, JavaScript, Rust, Go, and Python connect to sqld identically to any traditional client-server database, while the LD_PRELOAD compatibility layer enables switching existing SQLite applications from local to remote mode without code changes. Embedded replicas synchronize a local SQLite copy inside your application process with the primary server, delivering sub-millisecond read latency while maintaining consistency through streaming replication. Bottomless replication continuously backs up database state to S3-compatible object storage with generation-based snapshots and WAL page shipping, providing point-in-time recovery without manual backup scheduling. Native vector search enables semantic similarity queries directly within SQL using cosine distance functions, eliminating the need for external vector database infrastructure. Read replica support distributes query load across multiple sqld instances, and integration with mvSQLite adds multi-version concurrency for high-availability deployments. Created by Turso with 17,100+ stars and active production deployment. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Run every TV, menu board, kiosk, and video wall from one browser dashboard with ScreenTinker, a digital signage CMS you host yourself, with no per-screen license fees. Players cover Android TV, Fire TV, Samsung Tizen, LG webOS, Amazon Vega OS, Roku, Raspberry Pi, Windows, ChromeOS, and any web browser. Upload images and video, turn each PDF page into a slide, or design animated decks in the slide editor with templates, optional voiceover, a music bed, and an optional AI designer that works from a prompt using your own model endpoint. Widgets add clocks, weather, RSS tickers, moderated social walls, live IPTV streams, and iCal or JSON data bound straight into a slide. A weekly calendar handles recurring schedules, priorities, and time zones, and Preview at shows what a given screen will play at any chosen moment. Group screens to push playlists and bulk commands, split displays into zones, or join several panels into a video wall with bezel compensation. Live remote control, CSV proof-of-play reports, and offline email alerts keep a fleet in check, while web and Android players cache content and keep playing through outages. Workspaces, six role levels, optional approval before publishing, OIDC single sign-on, white-label branding on your own domain, and a scoped REST API serve agencies and larger teams. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

With over 2,700 GitHub stars, Auto Company is the first open-source framework that runs a fully autonomous AI company 24/7 — 14 specialized agents modeled after Jeff Bezos (CEO strategy), Werner Vogels (CTO architecture), Charlie Munger (critical analysis), DHH (full-stack engineering), Kelsey Hightower (DevOps), Seth Godin (marketing), and eight more domain experts collaborate through dynamic squad formation to ideate products, write code, deploy infrastructure, and execute marketing campaigns without human intervention. The five-layer architecture separates execution, orchestration, cognition, workflow routing, and observability, while the consensus memory pattern uses a single markdown file as a relay baton between cycles — no vector databases, no Redis, no embeddings required. A bash loop invokes Claude Code or OpenAI Codex CLI every 30 seconds, each cycle selecting 2-5 agents from the 14-person pool based on task context. Over 30 reusable skills handle specialized tasks from frontend design to competitive analysis and deployment automation. Circuit breakers trigger cooldown after consecutive errors, rate-limit detection auto-sleeps on API throttling, and sandbox rollback protects against destructive changes. The Python-powered web dashboard displays real-time cycle status, cost tracking per cycle averaging under $2, and agent activity visualization, with CLI control via make start, stop, monitor, pause, and resume. Supports macOS via launchd, Windows via WSL with systemd, and native Linux deployment. The npx create-auto-co command scaffolds a new AI company in seconds. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Document review, fixed-layout report generation, and multi-step research that ends in a PPT, Excel, or Word file all run inside BISHENG, a self-hosted workspace for enterprise AI applications. Review and report flows are drawn on a visual canvas where a circle becomes a loop, side-by-side nodes run in parallel, and a multi-item selection runs as a batch. A running flow can stop for a person to give input, confirm, or make changes, and chat and automation share one flow type. Research goes to Task Mode: give it a goal plus any files, knowledge bases, tools, and skills, and it writes a checklist, hands research to parallel sub-agents, and returns a report with clickable citation markers. Teams sharing documents use Knowledge Spaces, with folders, tags, keyword search, AI Q&A that shows its sources, and permissions down to a single file for people, departments, or user groups. For a daily news briefing, Channels turn WeChat official accounts and websites into topic feeds and save articles as knowledge in one click. Admins connect OpenAI-compatible APIs, Azure OpenAI, Anthropic, Qwen, DeepSeek, and local Ollama models, then govern access with approvals, audit logs, SSO, and LDAP. Private document parsing reads printed text, handwriting, tables, layouts, and seals, and a service-account Open API lets other systems call applications and knowledge bases. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Instead of wrestling with raw command-line flags and YAML configuration files for every device on your self-hosted Headscale mesh VPN, Headplane gives you a Tailscale-style web administration console to manage machines, users, DNS records, and access policies from any browser. From the machines overview, network administrators can inspect connected nodes, view Tailnet IPv4 and IPv6 addresses, rename devices, reassign ownership across users, toggle key expiration, and approve advertised subnet routes or exit nodes in a couple of clicks. Built-in Access Control List (ACL) management lets you edit security policies, define user groups, assign node tags, and configure auto-approvers without manually SSHing into your control server. When someone needs immediate shell access to a remote Linux host on the mesh, the integrated WebSSH console opens an interactive terminal session right inside the browser tab over Tailscale SSH. You can also manage MagicDNS settings, configure split DNS nameservers, and add custom DNS records that automatically reload your Headscale instance. Multi-user administration supports OpenID Connect (OIDC) single sign-on with identity providers like Okta, Authentik, Authelia, and Google Workspace, alongside granular role assignments and pre-authentication key generation for unattended server enrollment. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Cupdate keeps a watchful eye on every container image you run, reporting which ones are outdated or vulnerable while deliberately never touching the update button itself. Point it at a Kubernetes cluster, a Docker socket, or Podman hosts (local or remote, one or several) and it inventories every image in use with no configuration to write. Each image is matched against its registry to find the newest available version, and the dashboard shows the gap between what you deployed and what you could be running, with release notes inline so the decision to upgrade takes seconds instead of a changelog hunt. Vulnerability data is layered on top from four sources: Docker Scout for Docker Hub images, Clair for participating Quay images, GitHub Advisories for images tied to repositories, and osv.dev correlation for images shipping SBOMs. A dependency graph explains why each image exists in your stack by showing which workloads pull it, which ends the "can I delete this?" guessing game. Subscribe to the RSS feed to hear about new releases passively, query the REST API to drive scripts that update compose files or kustomizations, or surface outdated and vulnerable counts in a Homepage dashboard widget. Prometheus metrics and traces are available when you want the watcher itself watched. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Created to eliminate the configuration fragmentation plaguing multi-device Homelab setups and small-team infrastructures, NetsGo merges what typically requires three separate tools — a tunnel daemon, a management panel, and a monitoring stack — into a single Go binary that starts with one command and listens on one port. The server exposes HTTP, TCP, and UDP tunnels, a built-in Web console for node management, a REST API for automation, and real-time traffic statistics with per-client bandwidth limiting, all sharing default port 9527 so firewalls and reverse proxies need only a single rule. Version 0.1.11 introduced Client-to-Client P2P tunnels via WebRTC DataChannel with three selectable transport strategies — Server relay, Prefer P2P with automatic fallback, and P2P only — reducing latency for direct connections while maintaining the centralized control plane. The management console displays every connected client's online status, authentication tokens, tunnel configuration, active transport mode, P2P candidate gathering progress, and cumulative byte-level traffic counters updated every second. Unlike frp or rathole which delegate management to external plugins or configuration files, NetsGo provides built-in client key generation, tunnel target migration between nodes, SOCKS5 proxying, IP-whitelist console access, and one-command server upgrades. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Freelancers, contractors, and small shops can turn a short form into a client-ready PDF invoice, with a live preview that redraws on every keystroke and no account to create. Fill in seller and buyer details, then add line items with quantity, unit, net price, and tax rate; net amounts, tax, totals, and the amount in words are calculated automatically. Item discounts take a percentage or fixed amount off any line under a custom label, and tax applies to the discounted figure. Pick a classic layout or a Stripe-style template, and add your logo as a JPEG, PNG, or WebP file. Invoices can be written in 13 languages, including Brazilian Portuguese, with 122 currencies, 18 date formats, and a number format setting that survives a language switch. Tax labels can read VAT, GST, Sales Tax, or anything else, or the tax columns can be dropped entirely. Bank account, SWIFT/BIC, payment method, due date, and notes sit alongside an optional QR code that can carry a payment link, UPI details, or contact information. Long invoices flow onto extra pages automatically. Saved seller and buyer profiles fill in the next invoice for you, and the data stays in the browser. Download the PDF or copy a shareable link that opens the same invoice for your client. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

MailCheap is a newsletter app you host yourself that writes, sends, and publishes your issues while charging you only for the emails you actually send, not for subscribers who never open anything. Write in an editor with slash commands, images, and content boxes, or send Markdown and HTML emails through the API, then work through a pre-send review that flags subject, preview text, unsubscribe link, and sender problems first. Bring your audience with you: CSV exports from beehiiv, Substack, Mailchimp, Kit, MailerLite, Buttondown, Ghost, and EmailOctopus import with each reader's status and signup date intact. Imports clean themselves, dropping invalid, misspelled, duplicate, throwaway, and spam-trap addresses, and a server-wide never-email list keeps known bad addresses out of every future import, signup, and send. Sending protects your domain: new contacts receive issues in paced steps, sends pause when bounce or complaint rates climb, and Gmail spam rates are watched daily. Every issue becomes a page on your newsletter's website, with a signup form, author page, share images, and a sitemap. Run up to three newsletters per account, each with separate contacts and campaigns, and follow subscribers over time with open and click reports by inbox provider. AI agents can do anything the dashboard can through the MCP server, and scripts get the same reach through the REST API, with sending marked irreversible so agents ask first. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Watchtower puts AI-driven security assessments into one web console, where sessions probe your attack surface while every request, finding, and piece of evidence is captured as it happens. The AI session console follows the attack surface, session progress, tool calls, and findings as an assessment runs, so you can watch an engagement unfold instead of reading a log afterwards. A built-in proxy workflow records HTTP and HTTPS traffic history with highlighted patterns, and any captured request can be sent to the Repeater for editing, replay, and response comparison. Mobile work is covered too: connect phones over USB or wireless, capture app traffic separately from accessibility control, and import WeChat mini-program packages to configure an assessment session. A public vulnerability intelligence library can be searched by component, severity, and source and kept synchronized locally, giving assessments current context without sending your targets anywhere. Findings are managed by source, severity, and status, each linked back to its supporting evidence, and the report editor assembles them with a live preview, impact notes, and remediation guidance. The dashboard tracks assets, tasks, AI sessions, token usage, and runtime resources, and task admission is budgeted against physical memory so heavy scans do not starve the host. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Kula watches a Linux server every second and turns CPU, memory, disks, network, containers, and applications into a live dashboard you can open before trouble becomes downtime. Follow total and per-core CPU, load averages, memory and swap pressure, disk I/O, filesystem space, temperatures, GPU load, and network throughput as charts update live in the browser. Drag to zoom into history, switch to focus or TV mode for a wall display, and check the System Info page when you need the hardware story behind a spike. Watch Docker, Podman, and cgroup containers beside host metrics, then add PostgreSQL, MySQL or MariaDB, nginx, and Apache monitoring or define custom metrics for the odd service only your team understands. Scrape the Prometheus endpoint into an existing observability stack, open the terminal UI over SSH for a quick live read, or ask the optional local Ollama assistant to discuss charts without sending data to a cloud service. Protect the dashboard with optional Argon2id logins and multiple users, schedule storage snapshots, and keep the whole tool working on closed networks with no external calls. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Born at Brazilian media giant Globo.com, Thumbor answers imaging CDNs like Imgix and Cloudinary with an HTTP service where every image variant is just a URL. Ask for /300x200/smart/your-image.jpg and Thumbor fetches the original, crops and resizes on demand, and caches the result - one source file, unlimited renditions, no batch pre-generation pipeline. The "smart" in the URL is the signature feature: OpenCV-based face detection finds people in the frame and crops around them (no more thumbnails with severed heads), and when no faces exist, feature detection finds visually important corners and computes a weighted center of mass as the focal point. Beyond cropping, a chainable filter pipeline handles brightness, contrast, grayscale, blur, red-eye removal, rounded corners, rotation, watermarks, and format conversion with quality control - applied in order via URL segments. All common image formats work out of the box, and every layer is pluggable: loaders (HTTP, local, S3), storages and result storages (local, S3, Ceph, and community backends), engines, optimizers, filters, and even custom detectors, with the awesome-thumbor list cataloging the ecosystem. URL signing prevents abuse of your processing capacity. Integrations exist for Django, Rails, Node, WordPress, and most frameworks. MIT-licensed, battle- tested for over a decade.

Fusio turns the data and services you already run into a managed API that partners, apps, and AI agents can actually use. The workflow starts small: add a database connection and a table becomes a REST endpoint, or proxy a remote service and route traffic between internal microservices. Each operation pairs an HTTP path with an action and a schema, so requests are validated and an OpenAPI specification plus client SDKs for major languages come out without extra effort. Custom behavior lives in reusable actions, and an AI assistant can draft actions and schemas from a plain-language prompt. Native Model Context Protocol support then offers those actions to autonomous agents as tools. Third-party developers get a self-service portal with documentation, testing tools, and their own keys. Every endpoint can be protected with scopes and rate limits. Asynchronous work runs through events, webhooks, cronjobs, and triggers. When the API becomes a product, plans, quotas, and transactions handle billing, and analytics follow usage, performance, and errors. A marketplace installs ready-made actions and apps, and the generator and test panels speed up development. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

MyCompany runs the whole back office of a small business, sales, stock, production, invoices, projects, payroll, and the shop till, as one application sharing one database. A lead arrives and moves across a kanban board with calls and emails logged on its card, then becomes a sales order and an invoice without retyping a single field. Purchasing raises supplier orders, receives goods into the right warehouse, and watches stock move between locations with full movement history, reservations, lots, and serial numbers. Manufacturing plans production orders from bills of materials with operations and work centers, tracking the materials actually consumed and what each finished batch cost. Projects track tasks and time with supervisor timesheets, HR keeps employee records, hourly rates, and payslips, and the retail point of sale handles barcodes, payments, register sessions, and discounts. Because every module reads and writes the same records, the invoice knows what the warehouse shipped and the project knows what the customer was billed. When your business outgrows a standard screen, customizations live in separate extension modules, so vendor updates never collide with the workflows you adapted. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Paste one SQL query result into a browser and get an interactive entity-relationship diagram instantly, with no installations, no credentials, and no account required. ChartDB's "Smart Query" runs a single statement in your existing database client that exports table definitions, relationships, indexes, and column types as JSON metadata, meaning the application never touches your database passwords. The canvas renders draggable entities with cardinality markers, collapsible grouping areas, and sticky notes for documentation. AI-powered DDL export generates migration scripts between dialect pairs like PostgreSQL to MySQL or SQLite to CockroachDB, analyzing your schema to produce target-specific DDL with correct type mappings and constraint translations. Import paths cover Smart Query JSON, raw DDL scripts, and DBML files from tools like dbdiagram.io. The AI layer connects to OpenAI or any compatible inference server including local vLLM instances running models like Qwen2.5-32B. Database coverage includes PostgreSQL (with Supabase and Timescale extensions), MySQL, SQL Server, MariaDB, SQLite (with Cloudflare D1), CockroachDB, ClickHouse, and Oracle. Exports to SVG with inline styles or SQL DDL in any target dialect. Ships as a React/Vite frontend behind Nginx in Docker, deployable on RepoCloud with dedicated VPS resources under the AGPL-3.0 license.