Self-hosted platforms and deployment frameworks for managing and scaling modern web applications on your infrastructure.
Vite is a frontend build toolchain that provides a unified development and production pipeline for modern web applications. It functions as a modular, environment-agnostic build engine that leverages native ES modules to serve source code directly to the browser, eliminating the need for expensive bundling during the development phase. By maintaining an environment-aware module graph, it supports concurrent development across client, server, and custom runtime environments. The project distinguishes itself through a high-performance development server that utilizes a hot module replacement protocol to propagate granular code updates via WebSockets, allowing for stateful application patches without full page reloads. Its architecture is built on a plugin-based transformation pipeline that ensures consistent code processing across both development and production builds. Additionally, it features advanced dependency pre-bundling, which converts CommonJS and UMD dependencies into optimized ESM chunks to improve loading efficiency and startup performance. Vite covers a broad capability surface, including comprehensive support for server-side rendering, multi-page application architectures, and static asset management. It provides extensive programmatic APIs for controlling code transformation, server lifecycles, and environment variable management. The toolchain also includes built-in optimizations for production, such as automatic code splitting, preload directive generation, and high-speed TypeScript transpilation. The project is configured through a standard file-based system, allowing developers to extend functionality via custom plugins and hooks that integrate directly into the build and runtime logic.
Remix is a full-stack web framework designed to manage data loading, mutations, and routing through standard web platform APIs. It functions as a server-side rendering framework that unifies server-side data processing and client-side interactivity within a single development model, ensuring applications remain consistent across diverse environments. The framework distinguishes itself by utilizing native web platform APIs for all request and response handling, including a declarative data mutation layer that synchronizes server-side database updates with client-side UI transitions via standard HTML form submissions. It employs a nested route-based architecture to organize application views into hierarchical layouts and uses an edge-native runtime adapter to ensure applications run consistently across Node.js, Deno, Bun, and various cloud edge providers without platform-specific dependencies. Beyond its core routing and mutation capabilities, the framework supports progressive enhancement, ensuring that applications remain functional even before client-side scripts load. It provides a modular set of tools for managing web infrastructure, including authentication, data validation, and middleware-based request processing, while optimizing asset delivery through build-time route manifest generation.
mdBook is a documentation build system and static site generator designed to compile collections of Markdown files into structured, navigable web-based books. It provides a comprehensive framework for managing technical documentation, featuring a hierarchical table of contents, integrated full-text search, and automated build processes that transform source content into ready-to-deploy HTML websites. The project distinguishes itself through a highly modular pipeline architecture that supports custom preprocessors and swappable rendering backends. This allows authors to intercept and modify content before the final output is generated, validate embedded code examples, or export documentation into formats beyond the default web presentation. A built-in development server provides live-reloading capabilities, monitoring file changes to ensure the local preview remains synchronized with the source during the authoring process. Beyond core generation, the tool offers extensive configuration options for customizing the reading experience, including support for mathematical notation, syntax highlighting, and interactive code snippets. Users can tailor the visual presentation by overriding default templates, CSS, and assets, or by configuring interactive features like search and navigation behavior through a centralized manifest file. The software is distributed as a command-line utility that facilitates project initialization, build management, and environment configuration. It can also be integrated into external applications to programmatically handle documentation workflows.
OpenSign is a self-hosted, open-source document signing platform that enables users to send, sign, and manage PDF documents with digital certificates and encryption. It functions as a complete e-signature solution, allowing organizations to run their own signing service on private infrastructure while maintaining full control over their data and document workflows. The platform supports sequential multi-signer workflows, where documents can be sent to multiple recipients in a predefined order, with each signer receiving an email-based one-time password for verification before accessing the document. Documents are rendered and annotated directly as PDFs, supporting hand-drawn, typed, or uploaded signature images through an advanced signing pad. The system includes a document audit trail that logs all activities with timestamps, IP addresses, and email IDs, and generates completion certificates for signed documents. OpenSign provides a REST API for integrating signing workflows into existing systems, along with webhook notifications that push real-time document status changes to external services. It connects with cloud storage and CRM platforms through Zapier and other integration tools. The application is deployed as a single Docker container configured entirely through environment variables, with documents stored in any S3-compatible object store and an automatic fallback to local filesystem storage. Users can create and reuse PDF templates, organize documents in folders, manage contacts in an address book, and set document expiration periods with the option for signers to reject signing with a reason.
Astro is a content-driven web framework designed for building multi-page applications that prioritize performance by shipping minimal JavaScript to the browser. It functions as a static site generator and server-side rendering engine, transforming source files into optimized HTML documents. By utilizing an island architecture, the framework isolates interactive components within static pages, ensuring that only necessary code is hydrated on the client side. The framework provides a unified build pipeline that supports component-agnostic rendering, allowing developers to integrate components from various UI libraries into a single project. It enforces content-collection type safety through schema-based validation for local data files and generates search-engine-friendly pages to ensure proper indexing. Beyond its core rendering capabilities, the project includes build-time asset optimization to process and transform images, scripts, and styles for reduced payload sizes. You can initialize a new project by running the create command via your package manager.
Laverna is an open-source note-taking application designed as a privacy-focused alternative to Evernote. It operates as a single-page application that runs entirely in the browser, combining Markdown editing with client-side encryption to ensure note content is encrypted on the device before it ever reaches a server or cloud storage. The application distinguishes itself through its offline-first architecture, storing notes locally using browser storage for full offline access and editing capabilities. It synchronizes notes across devices through a unified interface that connects to multiple backends including Dropbox and RemoteStorage, while maintaining data privacy through client-side encryption. The Markdown editor includes live preview that renders formatting and mathematical expressions in real-time as the user types. Laverna supports creating, editing, and browsing notes without an internet connection, with changes automatically syncing when connectivity returns. It provides secure note management through device-side encryption before any storage or synchronization occurs, keeping data private from servers and cloud services.
1Panel is a centralized server management and container orchestration platform designed to simplify the administration of Linux-based infrastructure. It provides a unified web interface for managing containerized workloads, automating system maintenance, and configuring server resources. By acting as a comprehensive control plane, the platform streamlines the deployment of applications, databases, and web services while offering granular control over host system internals and security settings. What distinguishes this platform is its integrated support for private artificial intelligence infrastructure. It functions as an AI infrastructure manager, allowing users to host, configure, and deploy local machine learning models and multi-agent workflows directly on their private servers. This capability is complemented by a programmable reverse proxy that handles web traffic routing, load balancing, and SSL termination, providing a high-performance layer for managing incoming requests and security filtering. The platform covers a broad range of administrative tasks, including automated data backups, system updates, and the deployment of curated open-source software through a centralized marketplace. It supports declarative service configuration and event-driven scheduling to maintain operational reliability across diverse hosting environments. Users can manage these operations through a command-driven environment that integrates natural language processing for system maintenance and incident response. The software can be installed on a Linux server using a single command script to initialize the management dashboard and begin infrastructure operations immediately.
Calibre-web is a self-hosted web application that provides a browser-based interface for browsing, managing, and reading digital book collections stored in a library database. It functions as a comprehensive library management system, allowing users to organize large collections, edit metadata, and perform automated content updates through a centralized administrative dashboard. The platform distinguishes itself by integrating directly with external infrastructure to extend the capabilities of a standard digital library. It supports remote storage mapping to host files on cloud providers, utilizes external binary tools for on-the-fly e-book format conversion, and features an automated delivery pipeline that uses standard mail protocols to sync content directly to e-reader devices. Furthermore, it provides flexible access control by delegating user authentication to external identity providers, including support for organizational directories and social login services. Beyond its core management features, the application includes tools for granular user permission management, content visibility filtering, and multilingual interface support. It maintains consistency with the underlying database through an object-relational mapping layer and offers mechanisms for monitoring remote storage changes to keep library metadata synchronized.
Pake is a command-line tool that transforms web pages into standalone desktop applications. By wrapping web content in a lightweight native shell, it enables users to package existing websites as native software for Windows, macOS, and Linux. The tool functions as a cross-platform packager that bundles a minimal browser runtime with application assets into a single executable file. Unlike traditional browser-based frameworks, it utilizes a system-level webview to render content, providing a desktop experience that operates with reduced overhead. Users can customize the resulting applications by defining specific window dimensions, application icons, and user agent strings during the build process. The software manages communication between the native host and the webview layer to handle window events and ensure the application behaves according to the configured settings.
Snapdrop is a web-based local file sharing tool and progressive web app designed for transferring files between devices on the same local network. It functions as an end-to-end encrypted transfer tool that allows users to move data across different devices and operating systems without manual configuration. The service supports self-hosting through a containerized deployment model, allowing users to run private instances of the file sharing service on their own infrastructure. This ensures that data transfers remain within a private local network. The system uses a signaling server for local network discovery and coordinates peer-to-peer connectivity to establish direct data channels between browsers. Security is maintained through client-side encryption to protect files during transmission.
Nginx Proxy Manager is a containerized gateway controller that provides a graphical interface for managing web server routing, security certificates, and access control lists. It functions as a centralized dashboard for directing incoming web traffic to internal services, allowing users to map domain names to specific network ports without manual configuration file edits. The project distinguishes itself by automating the lifecycle of SSL certificates through integrated certificate authority clients and ACME challenges. It utilizes a dynamic routing engine based on high-performance web server platforms to modify traffic rules in real time, while an event-driven system monitors database changes to trigger configuration reloads without interrupting active connections. Beyond core routing, the platform supports network access control by implementing authentication layers and IP filtering directly at the gateway level. It maintains persistent state for proxy host definitions and security metadata using a lightweight relational database, ensuring consistent management of infrastructure across isolated backend containers.
FileBrowser is an open-source, self-hosted file management interface that runs as a single binary with no external dependencies. It provides a web-based interface for browsing, uploading, editing, and sharing files on a remote server, with a core architecture built on JWT-based stateless authentication and a rule-based path permission engine that controls access at the directory level. The project distinguishes itself through a comprehensive access control system that supports multi-provider authentication including OIDC, LDAP, external JWT, and two-factor authentication, alongside granular permission rules that can be applied per user or group. It offers a hash-linked share system for controlled external file access with configurable expiration, password protection, and download limits, and exposes file operations through both a REST API and the WebDAV protocol for integration with desktop clients and external tools. The interface includes in-browser editing for text and office documents, a filesystem-wide search index for instant file lookup, and support for media previews. Deployment is available across Linux, macOS, Windows, and Docker, with configuration managed through a single YAML or JSON file.
Nuxt is a universal web framework designed for building full-stack applications that seamlessly transition between server-side rendering and client-side interactivity. It provides a comprehensive development environment that automates routing, dependency injection, and type generation, allowing developers to focus on application logic rather than manual configuration. By executing code in a platform-agnostic server engine, it supports deployment across diverse environments, including edge networks, serverless functions, and traditional Node.js runtimes. The framework distinguishes itself through a flexible hybrid rendering engine that enables per-route configuration, allowing developers to choose between static site generation, server-side rendering, or client-side execution to optimize performance and search engine indexing. Its modular architecture relies on a hook-based system for extensibility, while its file-based routing and global auto-importing capabilities streamline the development workflow by mapping directory structures directly to application endpoints and components. Beyond its core rendering and routing capabilities, Nuxt includes integrated tools for data fetching, SEO management, and styling. It provides utilities for managing asynchronous state, proxying headers, and ensuring consistent data hydration between the server and client. The framework also features built-in support for automated testing, error handling, and AI-assisted documentation, ensuring a structured approach to the entire software development lifecycle.
This project is a community-curated directory of open-source software designed for deployment in private server environments and home labs. It serves as a comprehensive resource for discovering independent, self-hosted alternatives to mainstream cloud services, enabling users to maintain full data ownership and control over their digital infrastructure. The directory is structured through a hierarchical taxonomy that organizes a vast collection of applications into logical categories, ranging from media management and data analytics to private communication and team productivity tools. It distinguishes itself through a collaborative peer-review process, where community members validate the quality and relevance of each submission to ensure the directory remains accurate and reliable. The project covers a broad capability surface, including infrastructure automation, container-based service deployment, and declarative configuration management. These tools assist users in maintaining reproducible server environments and managing complex service dependencies across private hardware. The directory is maintained as a version-controlled repository, ensuring that all updates and community-driven changes are tracked and transparent.
Rocket is a type-safe web framework designed for building server-side applications. It provides a high-performance asynchronous routing engine that maps incoming network traffic to concurrent handler functions, while managing the full lifecycle of web requests. The framework emphasizes compile-time verification, ensuring that request parameters, response types, and routing logic remain consistent throughout the development process. The framework distinguishes itself through its use of request guards, which act as a validation layer to intercept and transform incoming data into structured types before it reaches core business logic. It also features an integrated testing suite that allows developers to dispatch internal requests and verify application behavior without requiring an active network connection. Additionally, the framework supports thread-safe state management, enabling the sharing of global resources across the application while maintaining safe, concurrent access within individual handlers. Beyond its core routing and validation capabilities, the framework includes tools for automated configuration management, which merges settings from multiple sources into structured objects. It also provides extensive support for response handling, including asynchronous streaming, dynamic template rendering, and the ability to derive custom response logic for specific data types. These features are complemented by lifecycle hooks that allow for the execution of custom logic during application startup, shutdown, or request processing phases.
File Browser is a self-hosted application that provides a web-based interface for managing files and directories on a server. It functions as a virtual file system abstraction, allowing users to browse, organize, and edit text-based files directly within their browser without requiring local access to the server. The platform distinguishes itself through a comprehensive command-line interface that enables full administrative control over system configurations, user accounts, and automation hooks. It supports a flexible, event-driven architecture where custom shell scripts can be triggered automatically by specific file system operations. Additionally, the system offers robust multi-user access control, featuring pluggable authentication middleware that supports internal credentials, reverse proxy headers, and external script delegation. Beyond core file management, the system includes tools for interface branding, allowing for the injection of custom CSS and logos to match specific visual requirements. It also provides an interactive shell within the browser for executing server-side commands and supports integration with security tools to mitigate unauthorized access attempts. The software is designed for containerized or binary deployment and includes automated bootstrapping to simplify initial instance setup. All system state, including user data and configuration settings, is maintained through an embedded, file-based database.
Yew is a framework for building front-end web applications using Rust and WebAssembly. It provides a component-based architecture that allows developers to create modular, reusable user interface elements that manage their own state and logic. By compiling code into binary modules, the framework enables high-performance execution within modern browser environments. The framework distinguishes itself through a macro-based markup language that transforms declarative, HTML-like syntax into strongly-typed component structures during compilation. It features a robust server-side rendering engine that generates initial HTML to improve page load performance and search engine visibility. This is complemented by a hydration-capable runtime that synchronizes state and event listeners between server-generated markup and the client-side application, ensuring a transition to full interactivity without requiring a full page re-render. Yew supports complex interface development through virtual DOM reconciliation, which applies minimal updates to the browser document based on state changes. It also incorporates suspense-driven data fetching to manage asynchronous operations, ensuring that components only render once their required data is resolved. The framework includes tools for bundling web applications and configuring build environments to target WebAssembly platforms.
Filegator is a web-based file manager and self-hosted file sharing portal. It functions as a cloud storage gateway that allows users to organize, upload, and download files across local disks and various cloud storage providers through a single unified interface. The system features a multi-backend authentication provider capable of verifying identities via JSON files, databases, or external directory services. It includes a role-based access control system that manages user permissions, assigns home folders, and restricts access to specific files and system routes. The platform provides capabilities for large file transfers using resumable chunked uploads and bulk file exports via real-time zip archiving. It also supports storage data migration between backends, interface localization, and customizable application branding. Security and observability are handled through IP address filtering, CSRF protection, and application logging.
This project provides a remote development platform that enables users to access a full-featured integrated development environment through a standard web browser. By decoupling the user interface from the server-side filesystem, it allows for persistent coding workspaces to be hosted on remote servers, virtual machines, or cloud-native infrastructure, ensuring a consistent development experience from any device. The platform distinguishes itself through a secure gateway architecture that manages traffic, authentication, and encryption at the edge. It utilizes persistent WebSocket connections to synchronize editor state and terminal input-output between the remote server and the browser. Furthermore, it includes built-in service proxying capabilities that allow developers to expose locally running web applications via secure subdomains or subpaths, complete with integrated identity verification and traffic management. To support diverse infrastructure requirements, the system offers flexible deployment options including containerized environments and automated provisioning workflows. It maintains state continuity through filesystem-mounted persistence, ensuring that configurations and project data remain intact across restarts. The platform also enforces network security by managing TLS certificates for HTTPS traffic and providing integration layers for external authentication providers. Installation is supported across various host architectures through shell scripts, package managers, or standalone archives, with built-in utilities for managing the application lifecycle.