Open-source alternatives to Internet Pi

Giropops-monitoring is an integrated observability platform designed to monitor the health and performance of containerized infrastructure. It provides a containerized suite that orchestrates the deployment of monitoring services, enabling the collection, storage, and visualization of system metrics across distributed environments. The platform utilizes a pull-based approach to scrape performance data from target nodes, storing these metrics in a specialized time-series database for long-term analysis. Users can inspect this data through interactive, web-based dashboards that render real-time

This project is a collection of automated hardening frameworks and Ansible roles designed to secure Linux systems, databases, SSH services, and web servers. It functions as a configuration framework that reduces the attack surface of Linux distributions through the automated enforcement of security policies. The collection provides specific security baselines for a variety of services, including MySQL databases, OpenSSH daemons, and web servers such as Nginx and Apache. These roles are designed to remove insecure defaults, enforce secure authentication methods, and align system configurations

Ansible Interactive Tutorial is a learning platform and command-line training utility that runs interactive configuration management exercises inside pre-configured Docker containers. It provides an isolated multi-container sandbox environment featuring a control node and target hosts configured with pre-shared SSH keys for practicing infrastructure automation step by step. The platform guides users through structured, sequential learning paths from fundamental to advanced configuration management concepts. It supports volume-mounted local workspaces that bind host directories directly into r

Pi-hole is a self-hosted network utility that functions as a DNS sinkhole server to provide network-wide ad blocking. By acting as a dedicated network gateway, it intercepts and discards requests for known advertising, tracking, and malicious domains across an entire local network, preventing unwanted content from loading on any connected device. The software operates through a lightweight background daemon that handles high volumes of concurrent DNS queries with minimal resource overhead. It utilizes a host-file injection mechanism to redirect traffic toward its local filtering engine and ap

This project is an Ansible role and configuration framework designed to automate the installation and provisioning of network attached storage and self-hosted services. It functions as a home server orchestration tool for deploying media servers, cloud storage, and home automation tools on private hardware. The system includes a dynamic DNS configuration suite to expose local network services to the internet using custom hostnames. It allows for the deployment of interconnected application stacks and preconfigured service suites that are coordinated to achieve specific operational goals. The

This repository is a comprehensive educational resource covering the full spectrum of DevOps practices, including continuous integration and delivery, containerization, orchestration, configuration management, and infrastructure as code. It provides structured content that walks through automating the build, test, and deployment lifecycle using multi-stage pipelines with Jenkins and Azure DevOps. The material covers declarative server configuration and state management through automated Ansible playbooks, enabling consistent system environments across machines. It also addresses container lif

DietPi is an ultra-lightweight Debian distribution and software platform purpose-built for single-board computers. It provides a minimal operating system that strips away unnecessary services to reduce CPU and RAM usage, and includes a curated software catalogue of pre-optimised applications that can be installed with a single command. The system reads a plain-text configuration file before first boot to perform unattended OS and software installation, and offers a web interface for remote system administration. What distinguishes DietPi is its comprehensive, integrated approach to turning a

AWAvenue-Ads-Rule is an optimized DNS-level rule list designed to block advertising SDKs and tracking domains across all devices on a network. It operates by resolving known ad-serving domains to a non-routable address at the DNS query level, preventing any connection from being made before ads can load. The rule set is intentionally minimalist, focusing only on essential ad-serving domains to reduce memory and CPU overhead compared to comprehensive blocklists. It specifically targets domains associated with known advertising software development kits, particularly in Android applications, to

This project is a network security tool providing an application network firewall, a DNS blocklist manager, and a VPN client with multi-hop capabilities. It functions as a traffic controller that allows or blocks internet access for specific applications on a device. The system distinguishes itself through a DNS-over-HTTPS firewall and traffic obfuscation tools that inject random packets to mask communication patterns and bypass regional internet censorship. It utilizes multi-hop routing to hide the origin of network traffic by chaining connections through multiple remote servers. The softwa

Algo is a cloud VPN deployment tool and WireGuard orchestrator designed to automate the provisioning and configuration of personal VPN servers across multiple cloud infrastructure providers. It functions as a multi-cloud infrastructure provisioner and a VPN client configuration generator, creating the necessary tunnels and connection profiles for secure device connectivity. The project distinguishes itself by integrating a network ad-blocking DNS server directly into the deployment, filtering advertisements and malicious domains for all connected clients. It further simplifies the onboarding

Kubespray is an Ansible-based tool for deploying production-ready Kubernetes clusters on physical or virtual machines across various environments. It serves as an infrastructure provisioner and cluster deployer that automates the installation and configuration of cluster nodes. The project functions as a bare metal cluster orchestrator, allowing for the setup of Kubernetes on physical hardware without relying on a managed cloud provider. It includes specialized installers for configuring networking fabrics, pod communication plugins, and routing policies. The framework also manages the insta

This project provides an observability data pipeline designed to collect, transform, and route logs, metrics, and traces from diverse sources into standardized formats for analysis. It operates as a plugin-based component architecture using modular receivers, processors, and exporters to move telemetry data through sequential processing chains. The system utilizes an interface-driven component model that allows for interchangeable connectors and community-contributed extensions. It distinguishes itself through a domain-specific language for telemetry filtering, metadata-based resource attribu

Speedtest Tracker is a self-hosted application that automatically schedules and records internet speed tests on a recurring basis. It continuously monitors download and upload speeds, ping latency, and packet loss, storing results as time-series data in a relational database. The application displays historical trends through a web dashboard and provides a read-only public URL for sharing speed test history with unauthenticated visitors. When network performance degrades, Speedtest Tracker triggers alerts based on user-defined thresholds. Security and access control are built in: an IP addres

OpenTelemetry PHP is a standard-compliant observability framework designed to instrument applications for the collection and export of telemetry data. It provides a comprehensive suite of tools for capturing traces, metrics, and logs, enabling developers to monitor operational behavior and system performance in real time. The project distinguishes itself through an interface-driven plugin architecture that allows for the modular configuration of exporters, processors, and samplers. To maintain performance in production environments, it supports the use of native binary extensions for data ser

The Operator SDK is a framework for building, packaging, and managing custom controllers that extend the Kubernetes API. It serves as a toolset for defining new API types and implementing reconcile loops to automate the lifecycles of complex applications. The project provides specialized support for creating operators based on Helm charts or Ansible playbooks, allowing users to maintain a desired cluster state using existing automation tools. It includes a dedicated system for packaging controllers into standardized container image bundles for distribution via the Operator Lifecycle Manager.

LibreSpeed is a self-hosted HTML5 network speed test tool used to measure download and upload speeds, ping, and jitter. It operates as a private server for measuring network performance without relying on third-party services. The system functions as a multi-backend performance tool that executes network tests across different server environments and geographic locations. It supports both PHP and Node.js backends and acts as a network telemetry collector by recording connection metadata and performance metrics into a database for historical analysis and reporting. The tool provides capabilit

Blocky is a stateless DNS proxy that functions as a network-wide ad-blocker and content filter. It operates as a single binary or Docker container with no database or persistent state, accepting DNS queries over UDP, TCP, HTTPS, TLS, QUIC, and HTTP/3 through a unified plugin-based query pipeline. The core of the system is a client-group policy engine that assigns devices to named groups and applies per-group blocklists, allowlists, and upstream resolvers, with all configuration changes applied through hot-reloading without requiring a restart. The project distinguishes itself through its modu

DetectionLab is a reproducible Windows Active Directory security lab designed for testing detection capabilities. It uses an automation framework based on Vagrant and Packer to provision virtualized networks across multiple hypervisors and cloud platforms. The project utilizes Ansible for the declarative installation and configuration of domain services and endpoint security tools. It incorporates a browser-based remote access interface via Apache Guacamole to manage laboratory hosts without requiring standalone remote desktop clients. The environment includes a telemetry pipeline that aggre

Speedtest-cli is a command-line utility designed to measure internet upload and download throughput by connecting to remote servers. It functions as a diagnostic tool for evaluating connection quality and verifying network performance against service provider claims. The utility identifies testing endpoints by calculating the physical distance between the client and available servers, ensuring measurements are based on responsive nodes. It manages the testing lifecycle by coordinating with remote services to fetch server lists and register results, which can be exported into machine-readable

Uptime Kuma is a self-hosted monitoring platform designed to track the availability and performance of network services and websites. It functions as a centralized dashboard that executes asynchronous health checks on a scheduled interval, providing real-time visibility into infrastructure health and service uptime. The platform distinguishes itself through a dedicated notification engine that dispatches alerts across multiple third-party messaging services, alongside a public status page generator that allows users to communicate service health and historical metrics via custom domains. Its

LiteMonitor is a customizable desktop system dashboard and hardware performance monitor. It provides a visual overlay for tracking real-time CPU, GPU, memory, and network metrics, including temperature and power consumption. The application is an extensible system monitor that uses a modular plugin system to integrate third-party data sources, such as weather, stocks, and cryptocurrency, alongside core hardware telemetry. The tool includes a theme engine for adjusting colors, fonts, and layout, as well as window management controls for transparency and click-through behavior. It supports sys

Molecule is an infrastructure test orchestrator and testing framework designed for Ansible roles and collections. It functions as an ephemeral environment manager that spins up and tears down temporary test hosts to validate infrastructure code in isolation. The project distinguishes itself through a specialized idempotency validator that executes automation sequences multiple times to ensure no unintended changes occur after the initial desired state is reached. It utilizes a driver-based provisioning model to support the creation of test targets across containers, virtual machines, and clou

liquidctl is a command line interface and set of Python drivers used to monitor and control liquid cooling hardware. It functions as a liquid cooler controller, hardware telemetry tool, and RGB lighting controller, providing a unified way to manage temperatures, fan speeds, and pump rates for all-in-one and custom loop cooling systems. The project provides a Python hardware driver that enables programmatic control and telemetry collection without relying solely on the command line. It allows for the configuration of device lighting using standard RGB, HSV, and HSL formats. The system include

WhatCable is a macOS system utility for hardware monitoring and USB-C cable diagnostics. It functions as a marker chip reader, data link inspector, and power delivery analyzer to identify the technical specifications and hardware capabilities of connected cables. The tool extracts vendor IDs and specification flags from internal e-marker chips to verify cable authenticity and identify data transfer speeds and current ratings. It distinguishes itself by providing Thunderbolt topology inspection to visualize high-speed links and comparing active display modes against link capacity to diagnose r

Devilbox is a containerized development environment that provides a reproducible suite of web servers, databases, and language runtimes managed through a unified configuration. It functions as a Docker-based local development stack for LAMP and MEAN software stacks and as a manager for switching between different versions of these services to match specific project requirements. The system distinguishes itself by automating local network orchestration. It includes a Docker-based virtual host manager that automatically maps local directories to custom domains and a local DNS and SSL orchestrat

SpotX is a desktop client patcher designed to modify the Spotify application. It functions as an ad-blocking modifier and UI customizer that removes advertisements and promotional content from the music player. The project includes tools to disable automatic updates, ensuring that custom patches and visual themes remain active. It also provides a telemetry blocking patch to prevent the application from sending usage data and analytics to the service provider. The tool enables interface customization to hide specific sections, such as podcasts and audiobooks, from the homepage. These modifica

light-4j is a Java microservices framework designed for building scalable distributed systems. It provides a toolkit for developing cloud-native services with integrated support for service discovery, telemetry, and secure inter-service communication. The project includes a runtime OpenAPI request validator to ensure communication consistency by checking data against formal specifications. It also features an OAuth2 API security gateway for verifying identity tokens and managing credentials, alongside an event-sourcing messaging system for building command query responsibility segregation arc