Self-Hosted AWS Billing Dashboards

Marker is a comprehensive document processing platform designed to automate the conversion, extraction, and structuring of data from complex files. It functions as an orchestration engine that chains modular processing steps into versioned, reusable pipelines, allowing organizations to standardize document handling and automate repetitive business tasks at scale. The platform distinguishes itself through its support for secure, private infrastructure deployment, enabling users to run containerized services within their own environments to maintain strict data privacy. It features specialized engines for schema-driven data extraction and programmatic form automation, which map unstructured content from PDFs, images, and office files into predefined data structures. Additionally, the system provides robust change tracking and analysis tools to simplify collaborative review cycles by exporting redlines and comments into structured formats. Beyond core extraction, the platform includes a wide range of operational capabilities for managing document lifecycles. This includes asynchronous task queueing for high-throughput batch processing, granular concurrency and rate-limiting controls to ensure system stability, and event-driven webhook notifications for real-time integration with external systems. The platform also offers built-in usage analytics and monitoring tools to track performance metrics and infrastructure health. The project provides a complete set of client-side primitives and configuration utilities to manage the entire document processing workflow. Users can interact with the service through a documented API, supported by automatic retry logic and secure credential management to ensure reliable and authorized access to processing capabilities.

This project is a serverless service that generates dynamic, themeable visual summaries of software development activity. It functions as an automated metadata visualizer, transforming raw platform logs and repository metrics into resolution-independent vector graphics that can be embedded directly into markdown environments. The service distinguishes itself by offering highly configurable, query-parameter-driven rendering that allows users to customize the visual presentation of their coding patterns, language proficiency, and repository details. It supports both real-time generation via serverless functions and the creation of static image files through automated workflows, providing flexibility in how data is fetched and displayed. The platform aggregates disparate data points from multiple sources to provide comprehensive insights into development habits and project metadata. Users can deploy private instances of the service to maintain full control over caching strategies, authentication tokens, and rate limit management.

This project provides a full-stack, containerized mail server platform designed for self-hosting. It functions as a complete mail transfer agent that bundles essential services—including SMTP, IMAP, and POP3—into a unified environment. By leveraging container orchestration, it enables the deployment of private email infrastructure that handles message transport, delivery, and user management within a single, manageable service. The platform distinguishes itself through deep integration with container runtimes and robust configuration flexibility. It supports granular customization via configuration-file injection, initialization-script hooking, and volume-based persistence, allowing administrators to tune mail transport parameters and maintain state across container lifecycles. It also offers advanced operational capabilities such as multi-tenant relay routing, automated container updates, and native support for Kubernetes environments. Beyond core delivery, the server includes a comprehensive security and filtering suite. It integrates modular middleware for real-time spam and malware analysis, enforces cryptographic signing for message authenticity, and provides automated protection against brute-force attacks and malicious traffic. Administrative tasks are simplified through a dedicated command-line utility for account management, alias configuration, and storage quota enforcement, alongside built-in observability tools for monitoring server health and filtering statistics. The project is distributed as a container image, with documentation and configuration patterns provided to support deployment across standard container runtimes and orchestration platforms.

Glance is a self-hosted web portal designed to aggregate real-time data, system monitoring, and content feeds into a single, customizable dashboard. It functions as a centralized interface for managing internal tools and network services, allowing users to secure their portal with password authentication and define the application's visual identity and layout through structured configuration files. The platform is built on a modular widget engine that treats individual dashboard components as isolated units. This architecture enables users to arrange widgets into custom pages and columns, with each component independently fetching and rendering data from external sources, service status checks, or system interfaces. The system supports a wide range of integrations, including containerized workload monitoring, server resource tracking, and various web-based content feeds. Beyond its core monitoring capabilities, the application includes productivity utilities such as task management and custom search interfaces. It provides flexibility for advanced users through custom API data visualization, which allows for the transformation of raw JSON responses into formatted widgets using custom templates. The system is designed to operate behind reverse proxies and can be configured to interact directly with host-level interfaces and container runtimes.

Budibase is a low-code application platform and enterprise internal tool builder used to create custom business applications for organizational processes and reporting. It functions as a self-hosted backend as a service, providing the infrastructure to manage database integrations and expose public data interfaces for external application access. The platform includes an AI agent orchestrator for deploying autonomous agents that interact with business data and execute operational tasks. It differentiates itself through self-hosted infrastructure management, allowing the system to run on private hardware or cloud containers to maintain data control. The system covers broad capability areas including event-driven automation workflows, schema-driven data modeling, and role-based access control for managing user permissions and portal visibility. It also provides tools for connecting external systems, AI models, and third-party applications to synchronize data.

OpenBB is a financial data platform and investment research terminal designed to aggregate, normalize, and distribute market data across analytical workflows. It functions as a comprehensive ecosystem that bridges disparate financial data providers with custom applications, spreadsheets, and internal modeling infrastructure. The platform distinguishes itself through a provider-based data abstraction layer that normalizes heterogeneous financial APIs into a consistent, schema-driven format. This architecture supports quantitative research automation and the construction of interactive, widget-based dashboards, allowing users to maintain control over data within secure, self-hosted, or private infrastructure environments. Beyond its core terminal interface, the project provides a modular, plugin-driven architecture for integrating proprietary data feeds and external services. These capabilities enable the embedding of live market and historical datasets directly into custom software products and business intelligence platforms, ensuring consistent data availability for cross-platform analysis.

This project is a comprehensive zero-knowledge security suite designed for enterprise credential management, secrets orchestration, and password management. It provides a secure, end-to-end encrypted vault that allows users to store, synchronize, and manage sensitive information, including passwords, passkeys, and infrastructure secrets, across desktop, mobile, and browser environments. The platform distinguishes itself through a strict zero-knowledge architecture where all encryption and decryption occur locally on the client, ensuring that plaintext data remains inaccessible to the server. It supports flexible deployment models, allowing organizations to choose between managed cloud services or self-hosted infrastructure to meet specific data sovereignty and compliance requirements. Furthermore, the system integrates with external identity providers to streamline user provisioning and authentication, while offering advanced administrative controls for policy enforcement and security auditing. Beyond core storage, the platform provides extensive tools for DevOps and automated workflows, including command-line interfaces for secret injection and programmatic SDKs for custom integrations. It also includes robust collaboration features for secure data sharing, team resource management, and credential health monitoring to help organizations maintain a strong security posture.

This project is a self-hosted dashboard portal designed to centralize access to internal applications and infrastructure services. It functions as a configuration-driven platform that automatically discovers and organizes services from container runtimes and cluster management systems, presenting them within a unified, customizable web interface. The system distinguishes itself through a declarative widget framework that allows users to construct dashboard components by mapping raw API responses to visual elements. It includes a secure internal proxy layer that handles authentication, header injection, and request routing for external services, ensuring that data retrieval remains isolated and controlled. Developers can extend the platform by authoring custom widgets using standardized lifecycle hooks, which are supported by a comprehensive suite of unit and integration tests to ensure reliable data fetching and error handling. The platform covers a broad range of infrastructure monitoring and management capabilities, including real-time visualization of resource utilization for servers, containers, and virtual machines. Users can organize their dashboard through a hierarchical layout engine that supports nested service groups and flexible grid arrangements. The system also features a centralized localization layer to ensure consistent multi-language support across all interface elements and widgets. The application is managed through a centralized configuration file, which governs service discovery, global settings, and the behavior of various modular widgets.

Centrifugo is a self-hosted real-time messaging server that provides infrastructure for scalable notifications, a publish-subscribe message broker, and a language-agnostic WebSocket gateway. It allows for the delivery of instant messages and data streams to concurrent users via WebSockets and Server-Sent Events. The system functions as a communication layer that separates network transport from backend business logic. It supports distributed messaging clusters using Redis for coordination of presence and message delivery across multiple server nodes. The project covers channel subscription management, user presence tracking, and message recovery mechanisms to handle data loss during network disconnects. Security and operational capabilities include token-based connection authentication, proxy-based subscription validation, automated TLS certification, and connection rate limiting. Administration is supported through a server management command-line interface, and the project is distributed as Docker container images for consistent deployment.

This project is a network-accessible weather information service designed specifically for command-line environments. It delivers real-time meteorological data directly to terminal interfaces through simple HTTP requests, allowing users to retrieve weather reports without leaving their development environment or using a web browser. The service distinguishes itself through a stateless architecture that utilizes content negotiation to provide the optimal output format based on the client request. Whether a user requires plain text, ANSI-colored terminal output, structured JSON for programmatic integration, or graphical weather maps, the service dynamically renders the appropriate response. It also supports extensive customization through URL-encoded parameters, enabling users to specify unit systems, localization preferences, and detailed forecasting views. Beyond basic retrieval, the platform functions as a versatile data provider for system observability and automation. It includes native support for exporting weather data as Prometheus metrics, facilitating integration into monitoring and alerting infrastructure. The service is also optimized for embedding into various terminal-based tools, including status bars, chat clients, and system monitors, through configurable templates and specialized formatting options. The service is distributed as a self-contained binary, ensuring it can be deployed as a standalone entity without requiring external web infrastructure or persistent database sessions.

CryptPad is a self-hosted, zero-knowledge office suite designed for real-time collaborative editing and content management. It provides a privacy-centric infrastructure where documents, files, and notes are encrypted in the browser before transmission, ensuring that the server administrator cannot access the underlying data. The platform implements zero-knowledge user authentication, utilizing cryptographic keys to verify identities so that plain text passwords are never stored on the server. To further isolate sensitive operations, the system employs a security architecture that separates the user interface from cryptographic processes. The suite covers a range of administrative and operational capabilities, including user registration management, instance branding customization, and server parameter configuration. It also includes diagnostic utilities for system configuration and supports containerized deployment for consistent environment installation.

Grafana is an observability data platform designed to aggregate metrics, logs, and traces from diverse sources into a unified environment. It functions as a centralized interface for visualizing complex telemetry data, transforming raw streams into interactive dashboards that support real-time system health tracking and performance monitoring. The platform distinguishes itself through a plugin-based modular architecture that integrates disparate databases, cloud services, and monitoring tools via a standardized data abstraction layer. This framework allows for the dynamic loading of external components to support varied data sources and visualization types without requiring modifications to the core codebase. Additionally, the system incorporates a rule-based alerting engine that evaluates incoming data streams against defined thresholds to trigger automated notifications for incident response. Beyond its core visualization and alerting capabilities, the platform provides tools for infrastructure performance monitoring and operational data analysis. It utilizes a declarative, component-driven interface to manage dashboard states and a compiled backend to process high-throughput queries and API requests. The system maintains configuration persistence and state consistency across distributed instances through a centralized metadata storage layer.

This project is a community-curated directory of open-source software designed for deployment in private server environments and home labs. It serves as a comprehensive resource for discovering independent, self-hosted alternatives to mainstream cloud services, enabling users to maintain full data ownership and control over their digital infrastructure. The directory is structured through a hierarchical taxonomy that organizes a vast collection of applications into logical categories, ranging from media management and data analytics to private communication and team productivity tools. It distinguishes itself through a collaborative peer-review process, where community members validate the quality and relevance of each submission to ensure the directory remains accurate and reliable. The project covers a broad capability surface, including infrastructure automation, container-based service deployment, and declarative configuration management. These tools assist users in maintaining reproducible server environments and managing complex service dependencies across private hardware. The directory is maintained as a version-controlled repository, ensuring that all updates and community-driven changes are tracked and transparent.

LocalStack is an infrastructure development environment that provides a local simulation of cloud services. By leveraging container-orchestrated service lifecycles, it allows developers to build, test, and debug cloud-native applications on their local machines without requiring remote connectivity or incurring cloud provider costs. The platform distinguishes itself through sophisticated traffic redirection and request routing, which intercept cloud service calls at the network layer and redirect them to local handlers. This enables seamless integration with existing development workflows, allowing users to mock cloud resources, replicate infrastructure states, and execute ephemeral testing environments within continuous integration pipelines. Beyond core emulation, the platform includes a comprehensive suite of developer tools for managing service lifecycles, monitoring activity, and configuring runtime environments. It supports complex distributed architectures through event-driven simulation, persistent storage mapping, and dynamic configuration injection, ensuring that local environments accurately mirror production requirements. The system is designed for integration into automated build and deployment workflows, providing visual dashboards and terminal-based interfaces for real-time resource management and infrastructure troubleshooting.

Asciinema is a platform for capturing, replaying, and sharing command-line sessions. It provides a comprehensive suite of tools to record terminal activity into lightweight, text-based files that preserve ANSI escape sequences, allowing users to document technical workflows, troubleshooting steps, and software demonstrations with high fidelity. The project distinguishes itself through its versatile playback and distribution capabilities. It features a web-based player that renders interactive terminal sessions directly in the browser, supporting features like seeking, playback speed control, and custom visual themes. Beyond interactive playback, it includes utilities for converting recordings into animated images or videos, and provides infrastructure for self-hosting recording servers to maintain full control over data storage and security. The platform supports a wide range of integration and automation needs, including embedding interactive sessions into technical documentation, broadcasting live terminal activity to remote viewers, and programmatically generating recordings via scripts. It also offers robust management tools for indexing, searching, and organizing historical session data. The software is designed for flexible deployment, with server and storage components packaged into containerized units for independent hosting.

1Panel is a centralized server management and container orchestration platform designed to simplify the administration of Linux-based infrastructure. It provides a unified web interface for managing containerized workloads, automating system maintenance, and configuring server resources. By acting as a comprehensive control plane, the platform streamlines the deployment of applications, databases, and web services while offering granular control over host system internals and security settings. What distinguishes this platform is its integrated support for private artificial intelligence infrastructure. It functions as an AI infrastructure manager, allowing users to host, configure, and deploy local machine learning models and multi-agent workflows directly on their private servers. This capability is complemented by a programmable reverse proxy that handles web traffic routing, load balancing, and SSL termination, providing a high-performance layer for managing incoming requests and security filtering. The platform covers a broad range of administrative tasks, including automated data backups, system updates, and the deployment of curated open-source software through a centralized marketplace. It supports declarative service configuration and event-driven scheduling to maintain operational reliability across diverse hosting environments. Users can manage these operations through a command-driven environment that integrates natural language processing for system maintenance and incident response. The software can be installed on a Linux server using a single command script to initialize the management dashboard and begin infrastructure operations immediately.

Baserow is a self-hosted, no-code relational database platform built on PostgreSQL. It provides a spreadsheet-like interface for structuring and managing data without writing code, while exposing all database resources via a REST API to support headless architectures. The platform distinguishes itself by integrating large language models and embedding servers to power AI assistants and automated data generation. It further extends its utility as a no-code application builder, allowing users to create custom internal portals, dashboards, and business tools using visual logic and managed data. The system covers a broad range of capabilities, including business process automation with visual triggers, collaborative workspace management, and flexible data visualization through kanban boards, calendars, and timelines. It also supports advanced extensibility via a plugin system for custom field types and view filters, and executes user-defined scripts within a secure webassembly sandbox. Deployment is supported across various environments using Docker Compose, Helm charts for Kubernetes, and cloud infrastructure templates.

This project is an open-source, privacy-focused web analytics platform designed for high-throughput data ingestion and multi-tenant data management. It provides a cookie-less tracking engine that captures visitor interactions using ephemeral request metadata, ensuring comprehensive traffic visibility while maintaining strict privacy standards. The architecture utilizes an event-driven ingestion pipeline and aggregated metric storage to decouple data collection from processing, enabling efficient long-term retrieval and responsive dashboard performance. What distinguishes this platform is its emphasis on first-party data collection and proxy-based routing. By allowing tracking requests to be routed through a custom domain, the system effectively masks analytics traffic as internal requests, bypassing ad-blocking software and privacy filters that typically interfere with client-side scripts. This approach, combined with server-side event processing, ensures that site owners maintain accurate traffic data even when browser-based limitations are present. The platform offers a broad capability surface for managing complex organizational needs, including granular role-based access control, SAML-based single sign-on, and automated reporting workflows. Users can programmatically manage site configurations, integrate external data sources, and export raw event logs for deep analysis in third-party business intelligence tools. The system also supports advanced conversion funnel tracking, allowing teams to define and measure specific user journeys and revenue-generating actions across multiple websites from a centralized dashboard.

ntfy is a self-hosted messaging infrastructure that provides a lightweight platform for sending and receiving real-time notifications. It functions as a topic-based pub-sub server, allowing users to publish and subscribe to message channels using standard HTTP requests. By bridging server-side events with native mobile and desktop clients, it enables the delivery of alerts across various environments through a unified communication layer. The project distinguishes itself by offering a complete, private notification ecosystem that includes persistent message caching and robust access control. It supports the UnifiedPush protocol, acting as a gateway to native mobile operating system push services, which allows for decentralized notification delivery without reliance on proprietary cloud providers. Users can interact with the system through a command-line interface, webhooks, or persistent streaming connections like Server-Sent Events and WebSockets. The platform covers a broad range of operational capabilities, including automated system monitoring, workflow integration, and cross-platform event broadcasting. It supports advanced message features such as content templating, file attachments, interactive buttons, and priority-based delivery. The system is designed for flexible deployment, offering containerized and binary-based installation options that simplify integration into existing infrastructure. The software is distributed as a single static binary, facilitating straightforward deployment across Linux, macOS, and Windows environments.

Shields is a dynamic badge generator that creates visual status indicators for software projects by fetching live data from external APIs. It functions as a programmatic image renderer, converting structured data parameters into consistent, high-contrast vector graphics that can be embedded directly into markdown and web documentation via URL parameters. The project distinguishes itself by offering a self-hosted metadata server, allowing users to deploy the service behind their own firewalls to maintain full control over infrastructure and data privacy. It supports extensive customization, including the ability to define specific labels, messages, and color schemes, as well as the integration of custom logos and predefined icons to provide visual context for project metrics. The platform covers a broad capability surface for badge management, including modular data fetching, automated testing with mocked service responses, and a decoupled architecture for optional raster image conversion. It provides comprehensive tooling for developers to implement new service badges, manage server secrets, and monitor performance, ensuring consistent design standards across all generated status indicators.