Statping-ng
A status page and uptime monitor in one Go binary: Statping-ng - the actively maintained fork of Statping - replaces the UptimeRobot-plus-Statuspage combo with a ~20 MB Docker image using under 50 MB of RAM. It checks services over HTTP, TCP, UDP, ICMP ping, and gRPC health checks on configurable intervals, with per-service timeouts, expected status codes, POST requests with custom JSON bodies, SSL verification, and failure thresholds before alerting. The public status page is the differentiator against plain monitors: visitors see live status, uptime percentages, and latency charts grouped into service categories, with incident announcements and scheduled-maintenance messages you publish from the dashboard - and Sass-based custom styling matches the page to your brand rather than a vendor template. When something fails, notifiers fire immediately: Slack, Discord, Telegram, SMTP email, PagerDuty, Twilio SMS, Pushover, and custom webhooks, each testable before saving. Because notifiers are single Go files, the plugin system makes new channels straightforward. A RESTful API manages services and reads uptime data programmatically, and the free Statping mobile app connects to your server via QR code for on-the-go monitoring. Data persists to SQLite, MySQL, or PostgreSQL. Point it at internal services too - anything the container can reach is monitorable.
Polaris
Whether your personal audio library spans ten thousand lossless FLAC albums or a sprawling hierarchy of studio recordings, Polaris streams your entire music collection to any browser or mobile device with instant responsiveness. You can browse cataloged tracks by album, artist, genre, or raw directory tree without waiting for sluggish page loads. Multi-value metadata indexing cleanly separates collaborations across artists, composers, record labels, and lyricists. A structured query bar filters songs using per-field search operators and boolean combinators. During playback, real-time audio waveform visualizations render signal peaks directly inside the scrubbing bar. Lossless and compressed formats play seamlessly, covering FLAC, MP3, MP4, M4B, Ogg Vorbis, Opus, Musepack, APE, WAV, and AIFF files. Each household listener gets an isolated account with private playlists, dark mode themes, and customizable color palettes. Administrators can edit mount points, user credentials, and dynamic DNS hooks either through the web settings panel or a plain-text configuration file. Mobile listeners can also connect from dedicated Android and iOS companion apps on the go. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Dewarr
Your want-to-read shelf and your audiobook library finally talk to each other, so the next book you finish can trigger the hunt for the one after it. Dewarr syncs Goodreads shelves, CSV exports, custom public lists, and Hardcover lists, then watches them for new additions worth listening to. Connect Audiobookshelf or Grimmory and it knows what you already own, importing finished downloads into verified library folders instead of leaving files stranded in a downloads directory. Follow authors and series to catch future releases, with back-catalog review, filters, and exclusions before anything is grabbed, including release-day acquisition for titles you are waiting on. When you approve auto-download, it searches MyAnonamouse, Prowlarr, and AudiobookBay, ranks sources by your format, size, and seed preferences, and hands transfers to qBittorrent. Multi-file MP3 releases come back as one chapterized M4B, a chapter per file, ready for your player. The discovery page personalizes shelves with followed lists, award collections, trending books, and new releases. Household members get individual accounts, reading lists, and permissions, with sign-in through OpenID Connect providers or Plex. Notifications for grabs, imports, and digests go out over Discord, ntfy, Apprise, or plain webhooks. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
SuggestArr
Instead of manually hunting for what to watch next after finishing a series on Plex, Jellyfin, or Emby, let SuggestArr turn your household's recent viewing history into automated media discovery and download requests. The platform analyzes recently watched movies, shows, and anime, queries TMDb or any OpenAI-compatible LLM (including Ollama, OpenRouter, and LiteLLM) for tailored recommendations with plain-language explanations, and dispatches requests straight to Seer, Jellyseerr, or Overseerr. Built-in AI Search lets users describe a mood or plot in natural language and request matching titles in a single click. Administrators can schedule recurring discovery jobs, import public watchlists from Trakt and MDBList, and enforce granular filters for minimum ratings, release years, genres, and regional streaming service availability so you never download content you already pay to stream. Smart request controls pause jobs when Seer queues are full, require optional human approval before submission, auto-decline stale requests, and clean up unwatched suggestions automatically. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Apache Answer
Graduated as an Apache Software Foundation Top-Level Project with over 15,500 GitHub stars and 100,000+ Docker Hub downloads, Apache Answer delivers the structured Q&A platform that Stack Overflow and Discourse popularized — fully self-hosted under Apache 2.0 with zero vendor lock-in. The Go backend with React frontend serves questions, answers, and knowledge articles with real-time Markdown preview using CommonMark syntax, inline @mentions to ping domain experts, and transparent revision history tracking every edit. Version 2.0 introduced AI workflows including an integrated AI assistant that helps draft and improve answers, a Model Context Protocol server for connecting AI agents to your knowledge base, API key management, and editor plugin support for extending the writing experience. Advanced search filters by tags, usernames, scores, and date ranges, while real-time suggestions surface relevant existing questions as users type to reduce duplicates. The reputation system rewards quality contributions with configurable privilege thresholds, and admin/moderator/user roles control access across the platform. A plugin architecture enables community-built extensions for third-party OAuth login, caching backends, search engines, and storage providers. Theming supports custom layouts, dark mode, and responsive design across devices, with content available in 15+ languages translated by the community. Bulk user import, email domain restrictions, and content access controls secure the platform for enterprise deployment. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.
Answer
Run a Stack Overflow of your own: Apache Answer brings the question-and-answer format in-house, maintained under the Apache Software Foundation with an Apache-2.0 license. You use it to run a community forum, product help center, or internal knowledge base where content lives as questions and answers rather than wiki pages. It ships the mechanics that make that format work: voting, accepted answers, a reputation system with privilege levels, tagging, full-text search with filters, revision history on every edit, and admin/moderator/user roles. Content is written in Markdown with real-time preview and code syntax highlighting. A plugin system covers OAuth login (Google, GitHub), S3 storage, external search backends like Algolia, and Akismet anti-spam, and a REST API exposes platform data for integration. The backend is Go, the frontend React, and it runs against SQLite, MySQL, or PostgreSQL. Self-hosting replaces per-seat tools like Stack Overflow for Teams with a flat-cost instance where you own all the content.
OrcaQ
For developers and database administrators who want a full database IDE inside the browser without installing separate desktop clients on every machine, OrcaQ provides a unified workspace for PostgreSQL, MySQL, MariaDB, Oracle, SQLite, Cloudflare D1, Turso, and Redis. Engineers organize connections into named workspaces with SSH bastion tunneling, granular SSL configuration, and color-coded environment tags whose strict mode requires explicit confirmation before executing destructive mutations against production databases. The Quick Query data grid lets users filter, sort, paginate, and edit table rows inline while jumping across foreign-key relationships and inspecting table DDL metadata. When writing complex multi-statement SQL, the Raw SQL Editor provides context-aware autocomplete, query variables, nested script folders, and visual EXPLAIN execution plan analysis. Database architects can render interactive entity-relationship diagrams for single tables or entire schemas, compare two database schemas side by side to generate safe migration scripts, and manage Redis keys across string, hash, list, set, and sorted-set structures in a dedicated workbench. PostgreSQL administrators also gain a visual role-permission matrix, real-time instance health monitoring for active sessions, locks, and replication lag, native backup and restore job tracking, and an optional AI Orca Agent that drafts queries and detects anomalies while requiring human approval before any data modification runs. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
PigeonPod
To listen to your favorite YouTube channels, video playlists, and Bilibili creators during a commute without keeping a browser tab open, PigeonPod converts video subscriptions into private, standard podcast RSS feeds for any podcast player. Paste a channel URL, playlist link, or single video address to preview uploads and generate a protected feed for Apple Podcasts, Overcast, Pocket Casts, or AntennaPod. You can select audio-only or video output, customize bitrates and formats, and generate Podcasting 2.0 chapter markers for topic scrubbing. Scheduled background sync jobs fetch new releases automatically while on-demand history backfill queues older catalog episodes in bulk. Per-feed keyword rules, duration thresholds, and retention limits keep storage clean by filtering out shorts or marathon livestreams. Upload YouTube or Bilibili cookies for member-only streams, route traffic through custom proxies, and update the yt-dlp engine directly inside the web dashboard. A built-in web player, one-click public episode share pages, and OPML export let you stream in the browser or migrate subscriptions. Media files store on local disk or S3-compatible buckets such as Cloudflare R2 and MinIO, accompanied by YouTube API quota monitors and failure alerts. Multi-user role permissions support shared accounts across eight interface languages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.
Owncloud
The project that proved organizations could have Dropbox-style convenience with complete data ownership: ownCloud is the original open-source file sync and share platform - the codebase Nextcloud later forked from. This deployment runs the classic ownCloud Server (PHP over PostgreSQL or MariaDB, with Redis caching), the battle-tested edition trusted across enterprises, universities, and public institutions worldwide. The core loop: store files on your server, sync them via desktop clients for Windows, macOS, and Linux plus iOS and Android apps, and access everything through the web interface or standard WebDAV. Sharing is granular - internal users and groups, external recipients via public links with passwords and expiration dates, and federated sharing that connects separate ownCloud instances into one network. Security controls include file firewall rules, multi-factor authentication, encryption, and detailed audit-friendly lifecycle management with versioning and trash-bin recovery. An app marketplace extends the platform, and Web Office integrations bring collaborative document editing through Collabora Online, OnlyOffice, or Microsoft Office Online directly into your files. LDAP and Active Directory integration slots it into existing identity infrastructure. For teams that need a proven, self-hosted alternative to Dropbox or Google Drive - where compliance demands knowing exactly which disk your data sits on - ownCloud remains a foundational choice.
HFS
HFS turns any folder on a server into a file-sharing site that visitors open in a browser, with no upload step and no space or bandwidth cap beyond your own disk. Visitors browse, search, and download single files or whole folders as ZIP archives that start streaming immediately, and interrupted uploads or downloads can resume. A virtual file system lets you arrange and rename what is shared without touching the files on disk, while accounts and per-folder permissions decide who can see, download, upload, or delete. The admin web panel covers HTTPS with built-in certificate generation, bandwidth limits globally or per IP address, geographic blocking by country, and live connection monitoring with disconnect and IP ban. Plugins add thumbnails, share links, LDAP, two-factor sign-in, download quotas, and notifications, and a few lines of JavaScript in the admin panel can change the look or the backend behavior without a restart. The front end speaks 27+ languages, works on phones, and includes a media player for audio and video. Typical uses include sending large files to friends without uploading them first, publishing a download area, and collecting uploads from visitors. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.
Chatpad
Why should your chat history live on someone else's servers? Chatpad AI - a React/TypeScript front end for the OpenAI API, built on the Mantine component library - is designed around that question. Enter your own OpenAI API key and start chatting with GPT models; every conversation, prompt, and setting is stored locally in your browser via DexieJS over IndexedDB, with no tracking, no cookies, and no backend database at all. That architecture is the point - the Docker image is just Nginx serving static files, making it one of the lightest AI deployments in the catalog, and pay-per-token API pricing typically undercuts a ChatGPT Plus subscription for moderate use. The interface earns its "premium quality" tagline with the details: a persona selector that switches communication styles per conversation, a saved-prompts library for messages you reuse constantly, organized chat history, and full data export/import so conversations move between browsers or into backups as files you control. A JSON config file customizes defaults - models, API endpoints, UI options - without rebuilding the image. AGPL-licensed, with desktop builds available upstream. For teams that want ChatGPT's utility with a self-hosted, zero-telemetry footprint, Chatpad is the minimal, sane answer.
GyroidVault
The bracket you printed last spring sits in some folder, on some drive, under a filename you no longer remember; GyroidVault is the searchable library that ends the hunt, where every model can be inspected in 3D, tracked through its prints, and sent to a printer without touching a slicer queue. Point it at your existing folders on a NAS or server and it indexes STL, 3MF, STEP, OBJ, G-code, binary BGCODE, and even Fusion 360 files non-destructively, generating thumbnails and 2x2 collages while a duplicate finder flags identical copies by SHA-256 hash. Opening a model launches Studio 2.0: orbit the mesh, jump between isometric, top, front, and side cameras, switch between solid, wireframe, and X-ray shading, try filament colours live, arrange multi-part assemblies on one build plate, and snapshot your favourite angle as the cover. Sliced files give up their secrets too, with layer-by-layer toolpath previews plus infill, temperatures, filament weight, and estimated cost extracted automatically. From the same page you can fire G-code straight to a Moonraker or Klipper printer, open the file in OrcaSlicer, Bambu Studio, PrusaSlicer, Cura, or Creality Print, log each print with its material and outcome, and share a model through an expiring public link. Collections, version histories, custom metadata fields, and role-based accounts keep a growing print farm library tidy for everyone who uses it. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
Knock-Knock
Bots that knock on your server's login ports are always turned away by Knock-Knock, a multi-protocol honeypot that shows every attempt on a live dashboard. Honeypots answer on the standard ports for SSH, Telnet, FTP, RDP, SMB, SIP, HTTP, and SMTP, with MQTT, Node-RED, Modbus, S7, and SNMP as optional extras. Authentication is always rejected, so no bot ever gets a shell. Who is knocking? The live feed shows each attempt's country, username, password, ISP, IP, and protocol. From where? A 3D globe marks the origin in one of six styles, including an extruded country heat map. Trying what? Leaderboards rank countries, usernames, passwords, ISPs, and IP addresses, and a trivia panel explains why bots favor certain credentials. A protocol filter re-slices the feed, globe, and leaderboards together; SIP shows dialed numbers and toll-call destinations, and RDP shows hostnames and accounts. Too fast? Press the space bar to pause, right-click any knock for details, or switch on a virtual Geiger counter that clicks as attacks arrive. Want to fight back? Download hourly 30-day and 365-day blocklists with recipes for CSF, CrowdSec, ipset, nftables, and pfSense, or query the optional API for any IP, CIDR range, or ASN. Several honeypot servers can stream into one aggregated dashboard. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Black Candy
With 4,300+ GitHub stars and native mobile apps on three platforms, Black Candy transforms any VPS into a private Spotify-style streaming service for your personal music collection. The Ruby on Rails 7 backend with Hotwire Turbo and Stimulus delivers a responsive single-page-feeling web player supporting album browsing, artist views, playlists, favorites, and queue management without full page reloads. Point it at a media directory containing MP3, FLAC, OGG, AAC, or WAV files and Black Candy indexes metadata, fetches album artwork from Discogs API, and begins streaming immediately with on-the-fly transcoding that adapts bitrate to client bandwidth. Multi-user support gives each account independent playlists, favorites, and listening history while sharing the same music library — ideal for families or shared households. Native iOS, Android, and F-Droid apps maintained as separate repositories provide offline caching, background playback, and server discovery for mobile listening. The admin panel manages user accounts, configures media paths, and sets Discogs API tokens for automatic cover art retrieval. Deployment requires one Docker command — `docker run -p 80:80 ghcr.io/blackcandy-org/blackcandy:latest` — with persistent storage volumes for the SQLite database and media directory. For larger deployments, switch to PostgreSQL via environment variables with dedicated database URLs for ActionCable, SolidQueue, and SolidCache. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Authorizer
Your users belong in your own database - Authorizer, an open-source authentication and authorization server shipping as a single Go binary, keeps them there. It connects to 13+ backends - PostgreSQL, MySQL, SQLite, SQL Server, MariaDB, MongoDB, Cassandra, ScyllaDB, ArangoDB, DynamoDB, Couchbase, YugabyteDB, PlanetScale, and CockroachDB - so identity data lives beside the application it protects instead of in an auth vendor's cloud. The server is fully OAuth 2.0 and OpenID Connect compliant, including authorization code flow with PKCE, a JWKS endpoint, token revocation, and nine JWT signing algorithms. Login options cover email/password, magic links, TOTP multi-factor, SMS OTP via Twilio, and social providers including Google, GitHub, Apple, Microsoft, and Discord. Authorization goes beyond roles: an embedded OpenFGA engine provides Zanzibar-style relationship-based permission checks in process. APIs are exposed over GraphQL, REST, and gRPC, with SDKs for JavaScript, React, Go, and Python, plus themeable built-in login pages and an admin dashboard. Apache 2.0 licensed.
Urocissa
Urocissa is a self-hosted photo and video gallery engineered to browse, search, and filter a million-image library in under a second on modest hardware. Its photo stream scrolls endlessly without pagination or lazy loading, flying past the browser DOM height limit that breaks other galleries long before a million items. Search understands boolean operators, so a query mixing and, or, and not narrows a lifetime of photos in milliseconds, and select-all is equally instant across the whole collection. Point it at folders and it watches them for new arrivals, importing photos and videos automatically while duplicate detection keeps redundant copies out. EXIF data is extracted for every image, and your own tags layer manual organization on top, with timeline navigation and rotation built in. Albums share collections with family or clients, a read-only mode publishes a public gallery safely, and videos play inline without leaving the page. The index that makes this fast lives in memory at roughly half a gigabyte per million photos, and the whole application ships as a binary of about 25 megabytes, optionally protected by a password. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Chevereto
Build your own image and video sharing site, with public galleries, private albums, and embeddable links, on a server you control. Uploads arrive by drag and drop, clipboard paste, image URL, camera, ShareX, or API, in AVIF, JPEG, PNG, GIF, WebP, BMP, MOV, MP4, and WebM, and chunked transfers handle large files. Lossless JPEG handling fixes orientation and can strip EXIF data. Duplicate detection catches repeat uploads. Tags are created on the fly with autocomplete, camera models become tags automatically, and albums nest into sub-albums with covers, privacy levels, and passwords. Categories, search, and explore views help visitors find things; a bulk importer brings in folders of existing media. Each file gets viewer, direct, thumbnail, and medium links plus HTML, Markdown, and BBCode snippets with one-click copy, and oEmbed lets other sites preview a link. Roles split admin, manager, and user duties, profiles can be private, and two-factor authentication protects accounts. Files sit on local disk or S3-compatible storage, optionally served through a CDN URL. A dashboard tracks usage, color palettes and custom CSS and JavaScript restyle the site, and a single-profile mode suits a personal portfolio. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
Networking Toolbox
Subnet math, DNS lookups, DHCP options, and certificate checks share one browser tab in Networking Toolbox, a free toolkit for sysadmins and network engineers. Need to carve a /24 into departments? The VLSM planner fits named subnet requirements into a parent block, reports each subnet's efficiency and the leftover space, and exports the plan as CSV or JSON. Merging address lists? CIDR utilities summarize, split, compare, and deaggregate prefixes, with set operations for difference, overlap, and containment. Writing configs? Generators build DHCPv4 and DHCPv6 options, PXE profiles, Kea or ISC snippets, and SPF, DKIM, DMARC, CAA, TLSA, and SRV records, and DNSSEC helpers calculate key tags and DS records. Something broken? Diagnostics query DNS through Cloudflare, Google, Quad9, OpenDNS, or a resolver of your choice, read TLS certificate chains, grade HTTP security headers, trace redirects, check TCP ports, look up BGP routes and RDAP records, and test mail servers. Need a refresher? Reference guides explain private ranges, CGNAT, IPv6 address types, and common ports. A keyboard search palette puts any tool a few keystrokes away, and bookmarked tools stay available offline. Eighteen themes, four languages, custom branding, and accessibility switches make it feel like your own, and a keyless JSON API serves the subnet, CIDR, IP, and DNS utilities to scripts. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.