Self-hosted platforms and PaaS solutions for automating application deployments and managing cloud infrastructure environments.
Mailu is a complete email distribution system deployed as a suite of containerized images. It provides a self-hosted email infrastructure that integrates a webmail client interface with a centralized administration dashboard for managing domains, user accounts, and storage quotas. The system focuses on email deliverability and security through a framework that implements identity verification records and digital certificates. This includes the use of identity signatures and encryption to secure mail transport and prevent domain spoofing. The platform includes layered spam and malware filtering using greylisting and auto-learning engines. It further manages email traffic through rule-based routing, aliases, and user-level configurations for automated responses and server-side filtering.
This project is a self-hosted platform-as-a-service that provides a centralized management interface for deploying, configuring, and monitoring containerized applications and databases on private infrastructure. It functions as a visual control plane, automating the end-to-end lifecycle of services from source code to production. By managing container orchestration, networking, and resource allocation, it allows users to maintain full control over their own hardware while streamlining the delivery of software. The platform distinguishes itself through its agentless architecture, which uses secure shell connections to execute administrative tasks and manage remote servers without requiring persistent local software. It integrates directly with version control systems to trigger automated build and deployment pipelines, including the creation of temporary, isolated preview environments for every pull request. This workflow is supported by a declarative engine that uses templates to standardize the deployment of complex multi-container architectures and persistent database engines. Beyond core orchestration, the system handles the operational requirements of hosted services by managing dynamic reverse-proxy routing and automated SSL certificate lifecycles. It provides a comprehensive suite of infrastructure management tools, including browser-based terminal access for debugging, automated system dependency installation, and persistent state management via a central database. These capabilities ensure that infrastructure remains synchronized and consistent across multiple remote environments.
OpenSign is a self-hosted, open-source document signing platform that enables users to send, sign, and manage PDF documents with digital certificates and encryption. It functions as a complete e-signature solution, allowing organizations to run their own signing service on private infrastructure while maintaining full control over their data and document workflows. The platform supports sequential multi-signer workflows, where documents can be sent to multiple recipients in a predefined order, with each signer receiving an email-based one-time password for verification before accessing the document. Documents are rendered and annotated directly as PDFs, supporting hand-drawn, typed, or uploaded signature images through an advanced signing pad. The system includes a document audit trail that logs all activities with timestamps, IP addresses, and email IDs, and generates completion certificates for signed documents. OpenSign provides a REST API for integrating signing workflows into existing systems, along with webhook notifications that push real-time document status changes to external services. It connects with cloud storage and CRM platforms through Zapier and other integration tools. The application is deployed as a single Docker container configured entirely through environment variables, with documents stored in any S3-compatible object store and an automatic fallback to local filesystem storage. Users can create and reuse PDF templates, organize documents in folders, manage contacts in an address book, and set document expiration periods with the option for signers to reject signing with a reason.
1Panel is a centralized server management and container orchestration platform designed to simplify the administration of Linux-based infrastructure. It provides a unified web interface for managing containerized workloads, automating system maintenance, and configuring server resources. By acting as a comprehensive control plane, the platform streamlines the deployment of applications, databases, and web services while offering granular control over host system internals and security settings. What distinguishes this platform is its integrated support for private artificial intelligence infrastructure. It functions as an AI infrastructure manager, allowing users to host, configure, and deploy local machine learning models and multi-agent workflows directly on their private servers. This capability is complemented by a programmable reverse proxy that handles web traffic routing, load balancing, and SSL termination, providing a high-performance layer for managing incoming requests and security filtering. The platform covers a broad range of administrative tasks, including automated data backups, system updates, and the deployment of curated open-source software through a centralized marketplace. It supports declarative service configuration and event-driven scheduling to maintain operational reliability across diverse hosting environments. Users can manage these operations through a command-driven environment that integrates natural language processing for system maintenance and incident response. The software can be installed on a Linux server using a single command script to initialize the management dashboard and begin infrastructure operations immediately.
Hoppscotch is an open-source API development ecosystem designed for building, testing, and debugging REST, GraphQL, and real-time APIs. It provides a unified platform that functions across web browsers, desktop applications, and command-line interfaces, allowing developers to manage the entire API lifecycle from a single environment. The platform distinguishes itself through a highly interactive, command-driven interface that utilizes a global spotlight palette and keyboard shortcuts to streamline complex workflows. It supports advanced request manipulation and validation by executing JavaScript-based scripts and assertions within a sandboxed runtime. Furthermore, it integrates AI-assisted tools to automate the generation of request payloads, test scripts, and documentation, while maintaining compatibility with existing API definitions and collections from other formats. Beyond core testing capabilities, the project offers a collaborative workspace for teams to organize, share, and synchronize API collections and environment variables. It includes robust support for diverse authorization methods, proxy interception for network requests, and enterprise-grade features such as SCIM user provisioning and activity auditing. The software is available for self-hosted deployment via containerized architectures, ensuring consistent behavior across various production and development environments.
Dokku is a self-hosted platform as a service that automates the deployment and management of web applications on your own infrastructure. It functions as an infrastructure automation tool, providing a git-driven engine that triggers container builds, service orchestration, and release workflows directly from source code repositories. The platform distinguishes itself by using buildpack-based image construction to detect project structures and automate container creation without manual configuration. It manages the full application lifecycle through a simplified interface that abstracts low-level container runtime commands, while dynamically handling reverse-proxy routing and environment-variable-driven configuration to map traffic and decouple settings from the underlying host. Beyond core deployment, the system provides comprehensive infrastructure lifecycle management, including the automated setup of system dependencies and the configuration of administrative access controls. The platform is designed for modular expansion, allowing users to extend core functionality through a plugin system that hooks into lifecycle events. It is installed on Linux distributions using automated scripts to ensure consistent environment preparation.
Laverna is an open-source note-taking application designed as a privacy-focused alternative to Evernote. It operates as a single-page application that runs entirely in the browser, combining Markdown editing with client-side encryption to ensure note content is encrypted on the device before it ever reaches a server or cloud storage. The application distinguishes itself through its offline-first architecture, storing notes locally using browser storage for full offline access and editing capabilities. It synchronizes notes across devices through a unified interface that connects to multiple backends including Dropbox and RemoteStorage, while maintaining data privacy through client-side encryption. The Markdown editor includes live preview that renders formatting and mathematical expressions in real-time as the user types. Laverna supports creating, editing, and browsing notes without an internet connection, with changes automatically syncing when connectivity returns. It provides secure note management through device-side encryption before any storage or synchronization occurs, keeping data private from servers and cloud services.
Maybe is a self-hosted financial platform designed for private deployment, providing a centralized interface to track investments, budgets, and net worth. By running the application on your own infrastructure, you maintain full control over your sensitive financial data and privacy. The platform is delivered as a containerized application suite, utilizing a declarative configuration framework to manage service lifecycles. It distinguishes itself through a structured approach to version control, allowing users to pin specific release tags to ensure environment consistency and perform controlled updates by pulling updated images from a remote registry. The system includes comprehensive tools for managing the application lifecycle, including database volume maintenance and the ability to reset persistent storage states. Deployment is handled through container orchestration, which ensures that the service remains portable and consistent across diverse hosting environments.
This repository serves as a comprehensive directory and resource hub for accessing, deploying, and optimizing artificial intelligence tools. It functions as a community-driven index that aggregates web portals, mirror sites, and alternative hosting platforms to provide users with free or alternative access to large language models and conversational assistants. The project distinguishes itself by offering a dual focus on both service discovery and self-hosting capabilities. It provides a curated collection of open-source templates and frameworks that enable users to deploy private, custom-tailored chat interfaces within their own infrastructure. Beyond simple access, the repository maintains a library of prompt engineering resources and educational materials designed to standardize and improve the quality of interactions with various artificial intelligence models. The collection further encompasses a wide range of productivity tools and development workflow integrations. This includes resources for document analysis, automated code generation, and specialized software applications that assist in streamlining repetitive tasks. The repository is organized through metadata-driven categorization, allowing users to locate specific tools based on functional requirements and intended use cases.
Portainer is a unified infrastructure management platform that provides a centralized control plane for deploying, monitoring, and managing containerized applications. It functions as an orchestration-abstraction layer, translating user actions into platform-specific API calls to maintain consistency across diverse container runtimes and cluster technologies. By organizing users, teams, and resources into a single interface, it enables granular role-based access control and lifecycle management for containerized services and stacks. The platform distinguishes itself through its support for distributed edge infrastructure and secure remote connectivity. It utilizes encrypted tunnels and outbound-only agent communication to manage geographically dispersed environments without requiring inbound port exposure. Furthermore, it integrates a GitOps-driven reconciliation engine that automatically synchronizes service configurations from version-controlled repositories, facilitating continuous delivery workflows and automated stack redeployments. Beyond its core orchestration capabilities, the platform offers extensive tools for cluster administration, including web-based terminal access, namespace management, and resource monitoring. It supports standardized deployment through a template-based engine that allows for reusable configuration schemas and dynamic variable injection. Users can also manage multiple orchestration instances and remote environments through automated update scheduling, rollback mechanisms, and custom metadata tagging. The software is designed for flexible deployment, supporting air-gapped environments and providing programmatic access via secure API tokens.
NextChat is a self-hosted web application that provides a unified interface for interacting with multiple large language models. It functions as a conversational platform where users can manage and switch between diverse AI providers through configurable API backends, maintaining full control over their data and infrastructure. The platform features a persistent session layer designed to handle long-running dialogues by managing message history and context. It distinguishes itself through a structured prompt engineering environment that allows for the development and application of templates to refine model inputs. To ensure consistent performance during extended interactions, the application includes automated context window compression and dynamic prompt injection, which adjust historical message arrays to fit within model token limits. The software supports secure deployment via containerization, utilizing server-side proxying to manage sensitive API keys and authentication headers. It also incorporates local browser storage for low-latency access and offers options for synchronizing chat records across multiple sessions and devices. The application is configured through environment variables, allowing for flexible integration into private hosting environments.
This project is an automated deployment tool designed to streamline the installation, configuration, and maintenance of network proxy software on Linux servers. It functions as a command-line utility that manages the lifecycle of network tunneling services, enabling users to establish and control private traffic routing through repeatable, automated workflows. The tool distinguishes itself through an interactive, menu-driven interface that abstracts complex configuration parameters into selectable options, making it accessible for operators regardless of their technical background. It performs environment-aware path resolution to detect host architecture and distribution specifics, ensuring that binary packages and directory structures are correctly aligned during deployment. Furthermore, it integrates proxy processes directly into the host operating system as managed background daemons, ensuring automatic restarts and consistent boot-time initialization. Beyond initial setup, the project provides comprehensive infrastructure management capabilities, including automated service updates and configuration changes. It utilizes template-driven generation to create service files, ensuring that network traffic routing and security settings are applied consistently across remote server environments.
Coze Studio is a development platform for building intelligent agents and conversational applications. It provides a visual environment where users construct agents by linking workflows, knowledge bases, and custom prompts to automate complex tasks. The system functions as a central hub for managing AI model services, allowing developers to connect various providers to serve as the intelligence layer for their applications. The platform distinguishes itself through a node-based workflow orchestrator that enables the design of automated logic sequences on a visual canvas. It includes a modular plugin framework that uses standardized authentication and configuration templates to integrate third-party services and external data sources. Developers can monitor agent behavior in real-time within a live runtime environment to debug performance and refine outputs before deployment. Beyond core agent construction, the platform supports the full application lifecycle through containerized infrastructure orchestration and monorepo dependency management. It provides tools for schema-driven API generation, database schema synchronization, and the automated deployment of conversational interfaces to messaging platforms or custom software environments.
Awesome Compose is a collection of resources designed to demonstrate the orchestration of multi-container applications. It serves as a practical reference for using declarative configuration files to define, manage, and deploy complex software stacks, ensuring that services run consistently across development, testing, and production environments. The project highlights the capabilities of container lifecycle management by providing examples of how to bundle software with its dependencies into isolated, portable units. It emphasizes the use of multi-stage build pipelines to optimize image sizes and the integration of environment variables to decouple application logic from host-specific settings. By leveraging these patterns, users can standardize development workspaces and automate the maintenance of interconnected service architectures. Beyond basic orchestration, the repository covers the broader surface of container infrastructure, including the management of image registries, network configurations, and storage drivers. It also demonstrates how to execute build-time commands and embed complex scripts directly into configuration files to streamline the assembly of containerized environments.
rkt is a pod-native container engine and runtime for Linux that executes containerized applications as isolated pods. It serves as an OCI container runtime and a Linux container manager, supporting the execution of images based on Open Container Initiative, appc, and Docker specifications. The project distinguishes itself by offering hardware-level container isolation, allowing pods to run within virtual machines using KVM or QEMU for a dedicated kernel. It further separates itself through secure container deployment practices, utilizing SELinux mandatory access control and TPM-backed integrity verification to create cryptographically verifiable audit trails. The runtime integrates with cluster orchestrators via the Container Runtime Interface and manages application lifecycles through systemd unit files for automated sequencing and restarts. Its capability surface covers remote image retrieval and local overlay filesystem management, CNI-based networking, and the enforcement of hardware resource constraints. The system provides programmatic interfaces via a pod API for retrieving metadata, execution logs, and image specifications.
CasaOS is a lightweight software stack designed to transform standard Linux distributions into a comprehensive personal cloud platform. It functions as a management layer that sits atop the host operating system, providing a unified graphical dashboard to deploy, monitor, and administer containerized applications and local hardware resources. By automating the lifecycle of isolated software services, it enables users to maintain a private and secure digital infrastructure on their own hardware. The platform distinguishes itself through a declarative configuration model that continuously reconciles the actual state of services against defined system files. It features a virtualized file system abstraction that aggregates multiple physical storage drives into a single, accessible directory structure, simplifying data organization and network file sharing. A centralized application programming interface gateway translates web-based requests into system commands, ensuring that storage, networking, and container management remain accessible through a single, cohesive interface. Beyond its core management capabilities, the system incorporates an event-driven message bus to coordinate internal communication and real-time hardware updates. It supports modular extensibility, allowing for the dynamic loading of external packages to broaden the platform's functionality. The software is designed for installation across diverse hardware architectures, providing a consistent environment for hosting media collections and self-hosted applications.
LobeHub is a comprehensive multi-agent orchestration platform designed for building, configuring, and deploying specialized AI agents. It provides a unified chat-based gateway that allows users to manage autonomous agent teams across web, desktop, and mobile environments. By utilizing a framework that supports persistent memory and granular tool integration, the platform enables the execution of complex, multi-step workflows and domain-specific tasks. The platform distinguishes itself through an interactive artifact renderer that injects dynamic, visual UI elements directly into the chat stream, transforming conversational outputs into functional content. It features an extensible ecosystem where users can discover and share community-driven agents and skills. Furthermore, the system supports collaborative workspaces where multiple agents can be organized into teams to scale intelligence and refine content through parallel task execution. Beyond its core orchestration capabilities, the project provides a robust suite of tools for self-hosting and infrastructure management. It supports containerized deployment through standardized configurations, allowing for secure, private instances that maintain data sovereignty. The platform integrates with external services through a common interface for data access and tool interaction, ensuring that agents remain adaptable and capable of handling diverse, multimodal requirements. The project is designed for self-hosted environments and includes comprehensive documentation for containerized setup, environment configuration, and security management.
Helm is a package manager for Kubernetes that simplifies the deployment and management of multi-component applications. It functions as a template rendering engine and release coordinator, allowing users to bundle, version, and deploy software as standardized packages. By maintaining a persistent metadata layer within the cluster, it tracks release history and manages the full lifecycle of applications, including installations, upgrades, and rollbacks. What distinguishes Helm is its ability to handle complex application hierarchies through automated dependency resolution and the composition of umbrella charts. It provides robust security through cryptographic provenance verification, ensuring package integrity via digital signatures and hashes. Furthermore, it leverages standard container image registries for artifact distribution and utilizes server-side logic to resolve configuration conflicts during concurrent infrastructure updates. The project offers a comprehensive suite of tools for infrastructure management, including lifecycle hooks for custom automation, readiness testing, and advanced deployment strategies. It supports a highly extensible plugin architecture and provides developer utilities such as package inspection and repository management. Users can define reusable configuration logic through a sophisticated templating framework that supports dynamic data injection, flow control, and global value management. Helm is distributed as a command-line interface tool, providing a unified experience for managing containerized environments across development and production workflows.
This project provides a containerized DevOps platform by packaging a complete GitLab installation into Docker images. It enables the deployment of a self-hosted environment that integrates Git version control, project management, and continuous integration and delivery pipelines on private infrastructure. The implementation supports deployment via Docker Compose or orchestration through Docker Swarm, allowing for scalable stacks with integrated container registries. It utilizes environment variables for configuration and supports the offloading of artifacts and backups to remote object storage and external database containers. The platform covers a broad range of operational capabilities, including identity integration with LDAP, SAML, and OAuth, as well as automated system backup and recovery routines. It further includes tools for secure networking via SSL/TLS configuration, proxy traffic routing, and the hosting of static project pages. Administrative tasks are managed through command-line utilities for maintenance and health monitoring, while system communication is handled via SMTP and IMAP configurations.
Nginx Proxy Manager is a containerized gateway controller that provides a graphical interface for managing web server routing, security certificates, and access control lists. It functions as a centralized dashboard for directing incoming web traffic to internal services, allowing users to map domain names to specific network ports without manual configuration file edits. The project distinguishes itself by automating the lifecycle of SSL certificates through integrated certificate authority clients and ACME challenges. It utilizes a dynamic routing engine based on high-performance web server platforms to modify traffic rules in real time, while an event-driven system monitors database changes to trigger configuration reloads without interrupting active connections. Beyond core routing, the platform supports network access control by implementing authentication layers and IP filtering directly at the gateway level. It maintains persistent state for proxy host definitions and security metadata using a lightweight relational database, ensuring consistent management of infrastructure across isolated backend containers.