Large language models get a polished front end that can run fully offline: Open WebUI is the self-hosted front end of choice. It talks to local model runners, primarily Ollama, and to any OpenAI-compatible API, so LM Studio, vLLM, Groq, Mistral, OpenRouter, and cloud providers all plug into the same chat interface and can be mixed per conversation. RAG is built in: upload files to knowledge bases or reference them in chat with the # command, backed by a choice of nine vector databases (ChromaDB and PGVector officially maintained) and multiple extraction engines including Tika and Docling, with hybrid BM25-plus-vector search and cross-encoder reranking. Web search results from providers like SearXNG, Brave, and Tavily inject directly into conversations. Extensibility comes from Python tools and functions that run inside the chat, a Pipelines plugin framework, and native MCP support. Multi-user features include RBAC, SSO, and group permissions, and the instance itself exposes an OpenAI-compatible API your own apps can call.

Security-conscious IT departments pick Passbolt for its cryptography: every user holds an OpenPGP key pair, and shared credentials are encrypted individually to each recipient's public key - real end-to-end encryption, not a vault password handed around. All crypto runs client-side in the mandatory browser extension (distributed and signed through the Chrome and Firefox stores, deliberately separating the crypto code from the server that stores ciphertext); private keys and passphrases never touch your instance, and the server admin cannot read a single secret. Authentication uses the challenge-based GpgAuth protocol, secrets are digitally signed to verify sender integrity, and metadata encryption extends protection to resource names and URLs. Day to day it behaves like a polished commercial manager: auto-fill and auto-save in forms, strong password generation, anti-phishing protection, TOTP storage, folder hierarchies shared per-user or per-group with fine-grained permissions and instant cryptographic revocation. Native iOS, Android, and desktop apps ship alongside a JSON API, CLI, and SDKs for CI/CD secret retrieval and rotation. The PHP server runs on MariaDB and is AGPL-licensed open source - including the paid tiers' codebase - with published security audits.

Built as a direct rejection of the adtech model, Plausible is the best-known privacy-first web analytics tool - lightweight, cookie-free, and open-source. It sets no cookies and stores no personal data: unique visitors are counted via a hash of IP plus User-Agent that rotates every 24 hours and is never stored raw, so no consent banner is required and GDPR compliance is structural rather than contractual. The tracking script is under 1 KB - orders of magnitude lighter than GA - and the dashboard is a deliberate contrast to GA4's sprawl: one fast-loading page with visitors, sources, top pages, countries, devices, and UTM breakdowns, filterable by any dimension. Custom events and goals track signups and clicks, Google Search Console integration pulls in search queries, scheduled email reports keep stakeholders updated, and the Stats API (v2) plus CSV export feed data anywhere. This is the AGPL-licensed Community Edition, the same Elixir codebase that powers Plausible's cloud service, running as three containers: the web app, PostgreSQL for accounts, and ClickHouse for event storage - which means self-hosters get direct SQL access to raw analytics data the cloud version never exposes. Traffic data stays entirely on your server, with no visitor caps or per-pageview pricing.

Two decades of continuous development made Roundcube the standard-bearer of open-source webmail - a PHP IMAP client that gives any mail server a polished, application-like interface in the browser. It connects to whatever IMAP/SMTP stack you run - Dovecot, Postfix, a hosted mailbox - and delivers the full desktop-client experience: drag-and-drop message management, threaded conversation views, full MIME and HTML mail handling, find-as-you-type address book with groups and LDAP connectors, multiple sender identities, full-text search, and spell checking in dozens of languages. The default Elastic skin is genuinely responsive, working as well on a phone as a desktop, and the entire UI is skinnable. The plugin API is where deployments get shaped: managesieve exposes server-side filter management in the UI, enigma brings PGP encryption and signing via GnuPG, markasjunk trains spam filters, zipdownload batches attachments, password lets users change credentials, and attachment_reminder catches the classic forgotten-attachment email - among hundreds of community plugins. Built-in caching keeps large mailboxes fast, IMAP ACLs and shared folders support team setups, and XSS protection is engineered into the rendering pipeline. It scales from a single personal mailbox to unlimited users, backed by MySQL, MariaDB, PostgreSQL, or SQLite. GPL-licensed with regular security releases.

Up to 280 search services - Google, Bing, DuckDuckGo, Brave, Qwant, Startpage - aggregated without tracking or profiling: SearXNG is a privacy-respecting metasearch engine (AGPL-3.0, successor to Searx). Your instance queries the upstream engines on your behalf: your IP address, cookies, and search history never reach them, tracker parameters are stripped from result URLs, and an optional image proxy fetches thumbnails server-side so result pages leak nothing. It can even route outbound queries through Tor for full anonymity. Search is organized into categories - general, images, videos, news, maps, music, IT, science, files - with bang shortcuts for targeting specific engines, and every source can be enabled, disabled, or weighted per category in settings.yml. A plugin system adds calculators, hash tools, tracker removal, and unit conversions inline, and preferences (themes, safe search, languages, engine selection) persist in cookies rather than server-side accounts. The real argument for running your own instance rather than trusting a public one is control: you decide the logging policy (none), the engine mix, rate limiting, and who gets access - making it the default search backend for browsers, families, and teams that want Google-quality results without the profile.

The Bitwarden server, reimplemented in Rust: Vaultwarden (formerly bitwarden_rs) is the unofficial lightweight edition. It speaks the same wire protocol as the official server, so every official Bitwarden client - browser extensions, iOS, Android, desktop, and the bw CLI - connects without modification, while the server itself runs as a single container against SQLite (or MySQL/MariaDB/PostgreSQL) instead of the official multi-container stack that wants gigabytes of RAM. Features Bitwarden gates behind paid tiers ship free: organizations with collections, groups, member roles, and policies; TOTP code storage; file attachments; Bitwarden Send; Emergency Access; event logs; and admin password reset. Two-factor options cover authenticator apps, email, FIDO2 WebAuthn, YubiKey, and Duo, and OIDC-based SSO landed natively in v1.35.0. Zero-knowledge encryption is unchanged - vault data is encrypted client-side and the master password never reaches the server. Attachments and Sends store on local disk or S3-compatible backends, an admin panel manages users and server settings, and backup is copying one data directory. Suited to individuals and teams up to roughly 50 users.

Google's search results without Google's surveillance: Whoogle is a self-hosted proxy that strips the tracking and keeps the results. Your query goes from browser to your Whoogle instance, which fetches results from Google with a randomly generated User Agent and strips everything hostile before returning them: no ads or sponsored content, no third-party JavaScript or cookies, no AMP links, no URL tracking tags like utm_source, no referrer header - and Google sees your server's IP, never yours. Unlike metasearch engines that blend sources, Whoogle proxies Google exclusively, so result quality is exactly what you'd get logged out and incognito, minus the noise. A lightweight Flask app configured entirely through environment variables, it supports DuckDuckGo-style bang shortcuts, autocomplete suggestions, safe search, per-country and per-language filtering, site blocklists, and automatic rewriting of social links to privacy front-ends like Nitter and Invidious. Privacy hardening goes further: built-in Tor routing makes Google see an exit node instead of your server, HTTP/SOCKS proxy support covers other setups, and POST-based queries keep search terms out of logs. Light, dark, and fully custom CSS themes plus browser search-engine registration make it a drop-in default on desktop and mobile. Stateless, tiny, and trivial to run.

Meet Perplexica, your new AI-driven search engine sidekick that doesn't just search the web—it practically reads your mind! Harnessing the power of advanced machine learning, Perplexica dives deep into the ocean of the internet to fetch not just any answers, but the most relevant, crystal-clear responses, all while keeping your privacy under lock and key. Built on the robust SearxNG framework, it's like having a super-smart librarian who also respects your personal space. Hosted on RepoCloud, it's not just smart—it's also a wallet-friendly genius!

One statically-compiled Go binary over PostgreSQL, no ORM, no framework, static assets embedded in the executable: Miniflux is the minimalist, opinionated feed reader. The opinions are the feature: page layout, fonts, and colors are tuned for reading, and everything else is treated as noise. It consumes Atom, RSS, and JSON Feed formats with OPML import/export, organizes articles with categories and bookmarks, fetches original full-text content for summary-only feeds, and provides Postgres-powered full-text search. Privacy work happens automatically: pixel trackers are stripped, tracking parameters removed from URLs, a media proxy blocks third-party tracking, referrers are never forwarded, and there is zero telemetry. Navigation is keyboard-first - j/k through items, o to open, f to star - with touch gestures on mobile. Podcast, video, and music enclosures are supported, and YouTube videos play inline. Over 25 integrations save articles onward to Wallabag, Readwise Reader, Pinboard, Linkding, Instapaper, Notion, Telegram, Matrix, Ntfy, and more, plus webhooks and a REST API with Go and Python clients; the Google Reader API endpoint supports existing mobile reader apps. Authentication spans local passwords, passkeys (WebAuthn), Google OAuth2, OpenID Connect, and reverse-proxy headers. It is Apache 2.0 licensed, translated into 20 languages, and updates feeds on an internal scheduler.

Embark on a task-taming adventure with WeKan, the open-source superhero of Kanban apps! Picture this: a digital playground where your projects transform into vibrant boards, each a realm of 'To Do', 'Doing', and 'Done' columns. Populate these realms with task cards—mighty little champions complete with titles, epic descriptions, and countdowns to their due dates. WeKan's lists are like the stages of a quest, guiding you through the workflow with the ease of a wizard's spell. Customize your quest log with a kaleidoscope of colors and fields to capture the lore of each task. Each card is a quest in itself, a scroll of information that moves with you from one stage to the next. And fear not, for WeKan is a fortress of privacy, with self-hosting shields, access control spells, and an open-source code grimoire for the ultimate security enchantment. Hosted on RepoCloud, your data stays as safe as treasure in a dragon's lair, but without the fiery breath and at a cost that would make even a dwarf smile. So why wait? Let WeKan be your guide in the quest for peak productivity!

Get ready to send those old-school analytics tools packing, because Shynet is here to revolutionize your data game! This open-source analytics maestro is like a privacy-loving ninja, delivering the lowdown on your website's traffic without creeping on individual users' digital footprints. Shynet's all about the big picture, serving up aggregated insights and trendsetting data that help you get chummy with your website's user dynamics. With features that are hotter than a server room in July, including real-time stats, session recon, and a nifty primary key integration, Shynet's got your back whether you're tracking clicks or counting conversions. And for those of you riding the single-page app wave, fear not! Shynet's got the chops to keep up with your page-hopping users, ensuring your data's as accurate as a Swiss watch. Fancy managing a digital empire? Shynet lets you set up multiple services, each with its own secret agent-style tracking script. Plus, with an API slicker than a greased otter, you can tap into your dashboard's brain from anywhere, anytime. So whether you're a mom-and-pop shop with big dreams, a code whisperer, or a data detective, Shynet's your go-to for making smart, informed website decisions. And hosting it on RepoCloud? That's like having your own digital butler, serving up top-notch hosting without burning a hole in your wallet. So why wait? Give your website the analytics hero it deserves, and let Shynet and RepoCloud be your dynamic duo!

Introducing AnonUpload: the ninja of file-sharing apps that lets you sneakily share files without leaving a digital footprint. No databases, no nosy tracking – just pure, unadulterated privacy. This PHP-powered maestro of anonymity is like a chameleon, blending seamlessly into any server environment – Nginx, Apache, Lightspeed, you name it. With a veritable smorgasbord of file types on the menu – from your garden-variety jpegs and gifs to the more exotic mp3s and mp4s – AnonUpload is the Swiss Army knife in your digital toolkit. And size? Pfft, it laughs in the face of size! Whether you're uploading a hefty 10GB treasure trove or a tiny text file, it's all gravy. Plus, with a built-in 'anticipation enhancer' (some might call it a download timer), it adds a sprinkle of excitement to the downloading process. Host it on RepoCloud, and you'll be the file-sharing wizard with more tricks up your sleeve than a cost-conscious cloud host at a magic convention!

Get ready to be the maestro of your own smart home symphony with Home Assistant! This open-source virtuoso of home automation is all about keeping things local (like your favorite coffee shop) and guarding your privacy like a digital fortress. Imagine orchestrating everything from your energy-sipping solar panels to your chatty voice assistants, all with the finesse of a custom-tailored suit. And for the security enthusiasts, it's got multi-factor authentication that's tougher to crack than a walnut in a vice. Best of all, it cozies up perfectly with a Raspberry Pi or any local server, making it the go-to conductor for your home's technological orchestra. With RepoCloud hosting, you'll be waving your baton at a fraction of the cost, without missing a beat in performance. Encore!

Embark on a social media odyssey with Mastodon, where you're the captain of your own digital destiny! Wave goodbye to pesky algorithms and intrusive ads, and say hello to a home feed that's as personalized as your coffee order. Whether you're sharing the latest earworm, your cinematic masterpiece, a gallery of your cat's antics, or stirring the pot with a spicy poll, Mastodon lets your creativity run wild. This decentralized, open-source gem is like a social media potluck – each server brings its own flavor, but together, they create a feast of global connections. Mastodon champions your digital autonomy, shunning ad overlords and profile pimps. It's built on the sturdy foundations of open web protocols, so it plays nice with any other platform that speaks ActivityPub. With Mastodon hosted on RepoCloud, you're not just building a social network; you're crafting a social sanctuary that mirrors your unique vibe, all while saving your wallet from the cloud hosting giants. Get ready to moderate, curate, and celebrate your online world with Mastodon on RepoCloud!

Get ready to collaborate like a super-spy with CryptPad, the open-source office suite that's as secure as a vault in Fort Knox! Wave goodbye to prying eyes because with end-to-end encryption, your secrets are safer than a squirrel's nut stash. Dive into a smorgasbord of applications and cook up projects with your pals or professional partners in real-time. Planning an epic adventure or plotting world domination in a client meeting? CryptPad's got you covered. And the best part? You can jump straight into the action without the hassle of sign-ups or downloads. It's not just an editor; it's your encrypted command center for all things teamwork. Host it on RepoCloud, and you'll be saving more than just your data – you'll be saving dough, too!

Every unit of income gets a job in Actual Budget - a local-first personal finance app built on envelope (zero-sum) budgeting, where you can only budget cash you actually have, which keeps the plan honest by construction. The data model is a SQLite file that lives on your device and works fully offline; the self-hosted Node.js sync server adds background multi-device synchronization using CRDT-based distributed-systems machinery, browser and mobile access as an installable web app, and automated backups. Optional end-to-end encryption makes the synced data unreadable even to the server hosting it. Transactions enter three ways: manual entry, file import (CSV, QIF, OFX, QFX, CAMT.053), or automatic bank syncing through GoCardless for EU/UK banks and SimpleFIN for US/Canada. Built-in YNAB4 and nYNAB importers migrate complete budget histories, and reports, schedules for recurring transactions, and rule-based transaction cleanup handle the day-to-day. A fully featured local API lets developers script custom importers and automation against their own data. 100% free, open source, and 26k stars strong.

Snap-happy shutterbugs, rejoice! Photoview is like a personal butler for your pixels, smartly sorting your snapshots and vids into a swanky digital gallery. Glide through gigabytes of glossy high-res memories with the grace of a gazelle. It's like having a psychic librarian who knows exactly where every photo and video is shelved, thanks to its magical sync with your file system. Wave goodbye to manual updates; this clever curation companion refreshes your collection as you add new moments to your montage. Fancy a bit of privacy? No problemo! Each user gets their own secret stash of media, locked down tighter than a drum with usernames and passwords. Want to flaunt your latest landscape shot or adorable kitten video? Share away with links that are as public or as hush-hush as you like. Photoview's got a knack for nosing out EXIF metadata, so you can see the 'who, what, when, and where' of every image, and even pin them to a map like a globetrotting detective. On the move? The iOS mobile version lets you peek at your portfolio on-the-fly. From RAW riddles to video voodoo, Photoview handles it all, dishing out thumbnails and web-optimized videos with the ease of a master chef. All this, hosted on RepoCloud, where the cost is as tiny as the thumbnails it creates, but the value is as vast as your ever-growing gallery of life's moments.

Machine translation with no Google, no Azure, no per-character billing, and no text leaving your infrastructure: LibreTranslate is a free, open-source translation API that runs entirely on your own server. The engine underneath is Argos Translate, which runs OpenNMT neural models with SentencePiece tokenization and Stanza sentence-boundary detection, all offline. Models install as portable .argosmodel packages covering dozens of languages - English, Spanish, French, German, Chinese, Japanese, Russian, Arabic, Hindi, Portuguese, and many more - and Argos handles automatic pivoting: with es-to-en and en-to-fr installed, it chains them to translate es-to-fr without a direct model. The API is a straightforward HTTP POST to /translate with source and target language codes, returning JSON - simple enough that the ecosystem has clients in every major language and integrations across tools like Weblate and Mastodon. Beyond plain text it translates HTML while preserving markup and handles whole file uploads (documents in, translated documents out), plus automatic language detection when the source is unknown. A clean bundled web UI serves interactive translation for end users, and optional API keys with rate limits control access. AGPL-licensed and trainable with custom models, it is the standard answer when translation must be private, unmetered, and self-contained - GDPR-sensitive text never touches a third party.