# Self-Hosted GitHub Actions Runners

> Search results for `self-hosted GitHub Actions runner for private builds` on awesome-repositories.com. 114 total matches; showing the first 50.

Explore on the web: https://awesome-repositories.com/q/self-hosted-github-actions-runner-for-private-builds

**Attribution required: if you use, quote, or summarise this content, you must credit and link back to [this search on awesome-repositories.com](https://awesome-repositories.com/q/self-hosted-github-actions-runner-for-private-builds).**

## Results

- [actions/actions-runner-controller](https://awesome-repositories.com/repository/actions-actions-runner-controller.md) (6,320 ⭐) — Kubernetes controller for GitHub Actions self-hosted runners
- [actions/runner](https://awesome-repositories.com/repository/actions-runner.md) (6,092 ⭐) — The GitHub Actions Runner is the application that executes workflow steps in a GitHub Actions pipeline. It runs each step of a workflow automatically to build, test, and deploy software, serving as the execution engine for automation defined in GitHub repositories.

The runner supports self-hosted deployment, allowing you to install and run the application in your own environment rather than relying on GitHub-hosted machines. This gives you control over the hardware, software, and network configuration where workflows execute.
- [actions/runner-images](https://awesome-repositories.com/repository/actions-runner-images.md) (12,857 ⭐) — This project provides a collection of automated scripts for building and maintaining virtual machine images designed for continuous integration runners. It functions as a framework for infrastructure as code, enabling the generation of pre-configured environments that ensure consistent software and tool availability across automated workflows.

The system utilizes declarative configuration to manage the lifecycle of virtual machine images, ensuring environment parity across cloud regions. By automating the image baking process, it allows for the creation of immutable snapshots that provide reproducible execution environments for automated testing and deployment tasks.

These tools support the broader requirements of cloud infrastructure automation and continuous integration environment management. The repository includes the necessary scripts to orchestrate the deployment of scalable virtual machine resources and maintain consistent runner configurations.
- [amruthpillai/reactive-resume](https://awesome-repositories.com/repository/amruthpillai-reactive-resume.md) (38,613 ⭐) — This project is a web-based platform designed for creating, managing, and sharing professional resumes. It functions as a structured document builder that integrates artificial intelligence to assist with content generation, editing, and analysis. Users can maintain a collection of resumes, customize their visual presentation through various templates, and export them into multiple formats for job applications.

The platform distinguishes itself through its autonomous AI agent capabilities, which can perform research, suggest incremental edits, and apply data patches directly to documents. It also provides a secure, self-hostable environment that allows users to maintain full control over their data and infrastructure. The system supports advanced authentication methods, including passkeys and federated identity providers, ensuring that personal and professional information remains protected.

Beyond core editing, the application includes tools for document organization, such as tagging, filtering, and legacy data migration. It features a robust document generation engine that separates content from design, allowing for precise layout control and styling. Users can share their resumes via password-protected public URLs and monitor document performance through integrated analytics.

The application is designed for containerized deployment, utilizing Docker Compose to facilitate consistent installation across private infrastructure. It includes built-in health monitoring and feature flagging to manage system performance and functionality without requiring code redeployments.
- [awesome-selfhosted/awesome-selfhosted](https://awesome-repositories.com/repository/awesome-selfhosted-awesome-selfhosted.md) (299,516 ⭐) — This project is a community-curated directory of open-source software designed for deployment in private server environments and home labs. It serves as a comprehensive resource for discovering independent, self-hosted alternatives to mainstream cloud services, enabling users to maintain full data ownership and control over their digital infrastructure.

The directory is structured through a hierarchical taxonomy that organizes a vast collection of applications into logical categories, ranging from media management and data analytics to private communication and team productivity tools. It distinguishes itself through a collaborative peer-review process, where community members validate the quality and relevance of each submission to ensure the directory remains accurate and reliable.

The project covers a broad capability surface, including infrastructure automation, container-based service deployment, and declarative configuration management. These tools assist users in maintaining reproducible server environments and managing complex service dependencies across private hardware.

The directory is maintained as a version-controlled repository, ensuring that all updates and community-driven changes are tracked and transparent.
- [asciinema/asciinema](https://awesome-repositories.com/repository/asciinema-asciinema.md) (16,852 ⭐) — Asciinema is a platform for capturing, replaying, and sharing command-line sessions. It provides a comprehensive suite of tools to record terminal activity into lightweight, text-based files that preserve ANSI escape sequences, allowing users to document technical workflows, troubleshooting steps, and software demonstrations with high fidelity.

The project distinguishes itself through its versatile playback and distribution capabilities. It features a web-based player that renders interactive terminal sessions directly in the browser, supporting features like seeking, playback speed control, and custom visual themes. Beyond interactive playback, it includes utilities for converting recordings into animated images or videos, and provides infrastructure for self-hosting recording servers to maintain full control over data storage and security.

The platform supports a wide range of integration and automation needs, including embedding interactive sessions into technical documentation, broadcasting live terminal activity to remote viewers, and programmatically generating recordings via scripts. It also offers robust management tools for indexing, searching, and organizing historical session data.

The software is designed for flexible deployment, with server and storage components packaged into containerized units for independent hosting.
- [fastapi/full-stack-fastapi-template](https://awesome-repositories.com/repository/fastapi-full-stack-fastapi-template.md) (43,815 ⭐) — This project is a full-stack web application scaffolder designed to initialize production-ready projects with pre-configured database, authentication, and deployment settings. It provides a standardized starting point for development by generating a complete application structure that includes integrated backend, frontend, and database components.

The template distinguishes itself through a type-safe integration layer that automatically synchronizes backend API definitions with frontend client code, ensuring consistent data exchange. It also features a containerized development environment that supports live code synchronization and interactive debugging, allowing developers to iterate on services without rebuilding images.

The project covers a broad capability surface, including automated database migrations, continuous deployment pipelines, and a built-in administrative dashboard for user and data management. It also incorporates infrastructure tools such as reverse-proxy routing and environment-variable-based configuration to maintain consistency across local development and remote production environments.

The repository is intended to be used as a template for new projects, supporting rapid initialization through a command-line scaffolding tool.
- [appsmithorg/appsmith](https://awesome-repositories.com/repository/appsmithorg-appsmith.md) (40,051 ⭐) — Appsmith is a low-code platform designed for building internal business tools, such as operational dashboards and administrative panels. It enables developers to construct dynamic user interfaces by dragging and dropping modular widgets onto a canvas and binding them directly to backend data sources. The platform utilizes a reactive framework that automatically updates interface elements and triggers functions whenever underlying data or widget properties change, eliminating the need for manual event handling.

The platform distinguishes itself through a server-side proxy architecture that executes database and API queries securely, masking sensitive credentials from the client. It provides a sandboxed JavaScript environment for custom logic, ensuring that application code remains isolated and secure. Developers can manage their projects using integrated Git-based version control, which allows for branching, merging, and tracking changes across deployment pipelines.

Beyond core UI construction, the platform includes a visual workflow orchestrator for automating business processes and handling human-in-the-loop tasks. It supports a wide range of data connectivity options, including SQL databases, third-party APIs, and AI-driven query execution. The system is built for enterprise environments, offering granular role-based access control, multi-tenancy support, and containerized deployment options for self-hosted infrastructure.

The platform is distributed as a containerized runtime, allowing for consistent deployment across local and cloud environments. It includes comprehensive administrative tools for managing authentication, system telemetry, and instance-level security configurations.
- [trufflesecurity/trufflehog](https://awesome-repositories.com/repository/trufflesecurity-trufflehog.md) (24,630 ⭐) — Trufflehog is a security tool designed to continuously monitor code repositories and cloud environments to detect, verify, and remediate exposed sensitive credentials and API keys. It functions as a comprehensive secret scanning engine that integrates directly into deployment pipelines and version control systems to intercept sensitive data before it is committed or pushed. By utilizing read-only operations and volatile memory processing, the system ensures that discovered credentials are never stored persistently, maintaining strict data privacy throughout the scanning lifecycle.

The platform distinguishes itself through a privacy-focused architecture that relies on cryptographic fingerprinting to track and deduplicate findings without ever transmitting or storing raw sensitive values. It supports distributed scanning via independent agents that connect to a central dashboard, allowing for localized analysis while maintaining network isolation. Furthermore, the system provides automated incident response capabilities, including secret rotation and revocation, which help organizations minimize the window of vulnerability for compromised credentials.

Beyond core detection, the project offers a broad capability surface for enterprise-wide access governance and security compliance. It includes modular detection logic for custom rule definitions, integration with external identity providers for role-based access control, and extensive monitoring across cloud storage, container infrastructure, and collaboration platforms. The system also provides detailed metadata tracing to link findings to specific users, pipelines, or commits, facilitating efficient remediation and auditability across large-scale development environments.
- [invisionapp/private-action-loader](https://awesome-repositories.com/repository/invisionapp-private-action-loader.md) (171 ⭐) — Allows private GitHub Actions to be easily reused
- [jonico/jenkinsfile-runner-github-actions](https://awesome-repositories.com/repository/jonico-jenkinsfile-runner-github-actions.md) (207 ⭐) — Jenkins single-shot pipeline execution in a GitHub Action POC
- [coollabsio/coolify](https://awesome-repositories.com/repository/coollabsio-coolify.md) (57,055 ⭐) — This project is a self-hosted platform-as-a-service that provides a centralized management interface for deploying, configuring, and monitoring containerized applications and databases on private infrastructure. It functions as a visual control plane, automating the end-to-end lifecycle of services from source code to production. By managing container orchestration, networking, and resource allocation, it allows users to maintain full control over their own hardware while streamlining the delivery of software.

The platform distinguishes itself through its agentless architecture, which uses secure shell connections to execute administrative tasks and manage remote servers without requiring persistent local software. It integrates directly with version control systems to trigger automated build and deployment pipelines, including the creation of temporary, isolated preview environments for every pull request. This workflow is supported by a declarative engine that uses templates to standardize the deployment of complex multi-container architectures and persistent database engines.

Beyond core orchestration, the system handles the operational requirements of hosted services by managing dynamic reverse-proxy routing and automated SSL certificate lifecycles. It provides a comprehensive suite of infrastructure management tools, including browser-based terminal access for debugging, automated system dependency installation, and persistent state management via a central database. These capabilities ensure that infrastructure remains synchronized and consistent across multiple remote environments.
- [geldata/gel](https://awesome-repositories.com/repository/geldata-gel.md) (14,065 ⭐) — Gel is an object-relational database system that models data as a graph of interconnected objects. By utilizing a strongly typed schema, it enables complex relational queries and polymorphic data structures without the need for traditional join tables. The system integrates native vector storage and similarity search operators, allowing it to function as both a relational and a vector database for semantic data retrieval.

The platform distinguishes itself through a comprehensive suite of developer-centric automation tools. It features a declarative migration system that tracks and versions schema changes, supporting advanced workflows like schema branching and merging. To ensure application-level reliability, the database introspects its own schema to generate type-safe client libraries and query builders, providing consistent data structures across application code.

Beyond core storage, the system provides extensive capabilities for data modeling, including computed properties, custom scalar types, and complex constraints. It supports versatile query execution, ranging from hierarchical nested data retrieval and atomic transactions to integrated retrieval-augmented generation workflows that connect directly to external language models.

The project is managed through a command-line interface that handles the full lifecycle of database instances, including provisioning, monitoring, and automated backup restoration. It offers flexible connectivity options, supporting both native language-specific drivers and a standardized HTTP-based query protocol.
- [laurent22/joplin](https://awesome-repositories.com/repository/laurent22-joplin.md) (55,233 ⭐) — Joplin is an open-source, cross-platform note-taking application designed for secure, private knowledge management. It functions as a local-first productivity platform, maintaining a complete relational database on the user's device to ensure offline availability and high-performance data retrieval. The application prioritizes data sovereignty by implementing an end-to-end encryption layer, which secures all information locally with a master key before any synchronization occurs.

The platform distinguishes itself through a delta-based synchronization engine that transmits only specific file changes, optimizing performance across multiple devices and operating systems. Users can extend the core environment through a plugin-based architecture that supports custom themes, scripts, and UI components. For professional or collaborative environments, the software offers self-hosted synchronization options and team management capabilities, allowing organizations to maintain full control over their data infrastructure and security policies.

Beyond core note-taking, the application supports rich multimedia content, including embedded files, diagrams, and mathematical expressions. It provides a comprehensive web-clipping tool for archiving online research and a RESTful API that enables programmatic access to notes and metadata for external integrations. The system is built on a cross-platform abstraction layer to ensure consistent behavior across desktop and mobile environments.
- [dubinc/dub](https://awesome-repositories.com/repository/dubinc-dub.md) (23,722 ⭐) — This project is a comprehensive link management and marketing attribution platform designed for creating, tracking, and analyzing shortened URLs. It functions as a centralized hub for marketing analytics, providing tools to monitor link performance, visualize conversion funnels, and manage affiliate programs through a unified dashboard.

The platform distinguishes itself by integrating advanced attribution modeling and partner management directly into the link infrastructure. It supports complex marketing workflows, including automated commission calculations, fraud detection, and payout distribution for affiliates, alongside granular traffic redirection based on device, location, or A/B testing requirements. By utilizing custom domains and reverse proxy configurations, it ensures reliable data collection that bypasses common browser-based tracking restrictions.

Beyond core link operations, the system offers extensive programmatic capabilities, including a robust API, SDKs, and event-driven webhooks for real-time integration with external services. It also incorporates enterprise-grade administrative features such as multi-tenant workspace isolation, role-based access control, and single sign-on integration to support collaborative team environments.

The platform is built to be deployed within private infrastructure, allowing organizations to maintain full control over their data and system configuration.
- [stoatchat/self-hosted](https://awesome-repositories.com/repository/stoatchat-self-hosted.md) (2,497 ⭐) — This project is a self-hosted communication suite and private messaging infrastructure. It is a containerized chat platform designed for deployment on independent hardware to maintain full control over user data and server dependencies.

The system features a modular plugin framework that allows custom features and behaviors to be loaded into the client at runtime via manifest files. It is designed as a proxy-compatible service, supporting configurable network port routing to operate behind external reverse proxy servers.

The platform covers capabilities for containerized service orchestration, private communication infrastructure deployment, and custom plugin development.
- [getsentry/self-hosted](https://awesome-repositories.com/repository/getsentry-self-hosted.md) (9,426 ⭐) — This project is a containerized error tracking platform and monitoring suite designed for self-hosted deployment on private infrastructure. It provides a collection of services for capturing and analyzing software crashes and exceptions, ensuring that sensitive application data remains within a controlled environment.

The system includes specialized tooling for air-gapped deployment, allowing the software to be installed and operated on servers without internet access through the manual transfer of container images. It also supports corporate network integration via proxy configurations to maintain connectivity within restricted firewall environments.

The operational surface covers infrastructure health monitoring through dedicated status endpoints and request routing via a reverse proxy. Persistent storage is managed through volume mapping to decouple data from container lifecycles.
- [owncloud/core](https://awesome-repositories.com/repository/owncloud-core.md) (8,793 ⭐) — This project is a self-hosted cloud storage server and content collaboration platform implemented as a PHP web application framework. It functions as a centralized server for storing, synchronizing, and sharing files and data across multiple devices.

The system operates as a WebDAV file server and a synchronization server for scheduling and contact information using CalDAV and CardDAV protocols. It features a plugin architecture that allows the server to be extended with additional applications and custom features.

The platform provides capabilities for user and group access management, external storage integration, and the exposure of data through a REST API. It also includes a command-line interface for administrative tasks and the execution of background processing jobs.
- [ankitects/anki](https://awesome-repositories.com/repository/ankitects-anki.md) (28,571 ⭐) — Anki is a cross-platform flashcard management system designed to optimize long-term memory retention through spaced-repetition learning. It functions as a digital learning assistant that uses active recall practice and automated scheduling algorithms to determine the ideal timing for card reviews based on individual performance history. The core system relies on a local relational database to ensure data persistence and portability, while supporting complex study workflows through flexible note-type schema modeling and template-driven content rendering.

The platform distinguishes itself through deep extensibility and content customization. Users can modify core application behavior and scheduling logic via a plugin-based framework or by implementing custom scheduling models. The interface supports rich media integration, including audio, images, and text-to-speech, which can be styled using HTML and CSS templates to suit specific subjects. Advanced users can further tailor the environment with dynamic script embedding, custom note types, and specialized card layouts like cloze deletions or image occlusions.

Beyond its core scheduling capabilities, the software provides a comprehensive suite of tools for managing large collections of study material. This includes hierarchical deck organization, tag-based content management, and advanced search and filtering utilities. The system also offers robust observability features, such as detailed performance analytics, study progress visualization, and tools for identifying and managing problematic study items.

Anki facilitates consistent learning across multiple devices through a built-in synchronization protocol that merges collection data and media assets. The application is distributed as a compiled build and includes extensive configuration options for display rendering, input methods, and system integration to ensure compatibility across various desktop environments.
- [elstudio/actions-js-build](https://awesome-repositories.com/repository/elstudio-actions-js-build.md) (54 ⭐) — GitHub Actions for running Javascript build tools and committing file changes
- [appwrite/appwrite](https://awesome-repositories.com/repository/appwrite-appwrite.md) (56,318 ⭐) — Appwrite is a backend-as-a-service platform that provides a unified development environment for building full-stack applications. It integrates essential infrastructure components—including authentication, databases, storage, and serverless functions—into a single, centralized interface to simplify application development and resource management.

The platform distinguishes itself through a container-based microservices architecture that ensures consistent execution across diverse infrastructure. It features a versatile connectivity layer that links frontend applications with third-party services, databases, and external APIs through standardized interfaces. Developers can manage and automate the configuration of these backend resources using infrastructure-as-code tools, while granular role-based access control enforces security policies across all platform resources and API endpoints.

Beyond its core services, the platform offers a broad capability surface that includes cross-platform data synchronization, event-driven webhooks, and comprehensive billing and usage monitoring. It supports extensive integrations for AI utilities, payment processing, messaging, and logging, allowing developers to extend application functionality through modular, event-driven workflows.

The platform is designed for both managed and self-hosted deployments, providing tools for production environment optimization, data migration, and custom domain configuration.
- [automatisch/automatisch](https://awesome-repositories.com/repository/automatisch-automatisch.md) (13,704 ⭐) — Automatisch is an open-source, self-hosted automation platform designed to orchestrate multi-stage workflows across various third-party web services. It functions as a no-code integration engine that allows users to connect disparate applications, enabling the automated movement of data and the execution of tasks without manual intervention. By running the platform on private infrastructure, users maintain full control over their data and ensure compliance with internal security policies.

The platform distinguishes itself through a focus on secure, local credential management and flexible integration capabilities. It supports standard authentication methods like OAuth and API keys, storing all third-party credentials in an encrypted format within the local environment. Users can define custom integrations using declarative metadata, allowing the system to handle complex operations such as automatic pagination for large datasets, polling for state changes, and immediate execution via webhooks.

Beyond core orchestration, the platform provides a comprehensive suite of utilities for processing and transforming data between workflow steps. It supports the execution of custom HTTP requests to bridge gaps between services that lack native support, and it offers tools for conditional logic and task scheduling. The system is designed for transparency and privacy, allowing administrators to configure environment variables and opt out of telemetry to keep all system metrics and data movement entirely internal.
- [zweitag/github-actions](https://awesome-repositories.com/repository/zweitag-github-actions.md) (7 ⭐) — This repository contains github actions for usage in our build pipeline.
- [donnemartin/system-design-primer](https://awesome-repositories.com/repository/donnemartin-system-design-primer.md) (353,387 ⭐) — This project is a comprehensive educational resource and study guide focused on distributed systems architecture and backend infrastructure design. It provides a structured curriculum for mastering the principles of scalability, reliability, and performance required to design complex software systems.

The repository distinguishes itself by offering a methodical approach to technical interview preparation, incorporating design patterns, architectural trade-offs, and spaced repetition tools to help users retain complex concepts. It emphasizes constraint-driven analysis, teaching users how to evaluate competing requirements like latency, consistency, and availability when drafting architectural designs.

The content covers a broad spectrum of system design capabilities, including strategies for database scaling, traffic management, and infrastructure optimization. It details techniques for horizontal scaling, multi-layered caching, asynchronous communication, and service discovery, while also providing frameworks for performing resource estimations and capacity planning.

The documentation is organized as a study guide, offering a systematic path through the fundamentals of backend engineering and large-scale system design.
- [beclab/olares](https://awesome-repositories.com/repository/beclab-olares.md) (4,086 ⭐) — Olares is a comprehensive suite of self-hosted identity, storage, AI, and orchestration services designed for private infrastructure management. It functions as a Kubernetes home server orchestrator, enabling the deployment of containerized applications, AI models, and GPU resources on local hardware to replace third-party cloud services.

The platform distinguishes itself through a combination of self-hosted AI infrastructure for running large language models and image generators, alongside a decentralized identity manager that uses cryptographic keys and OIDC for trustless authentication. It further provides a secure remote access gateway and a private cloud storage suite utilizing S3-compatible storage and POSIX-compliant file access.

The system covers broad capability areas including container cluster orchestration via a permissionless application marketplace, home automation for smart device coordination, and network traffic management using encrypted tunnels and reverse proxies. It also integrates relational and vector data storage, system health monitoring, and application sandboxing for secure software execution.

Management of the cluster and its hosted applications is performed through a command-line interface and a background daemon.
- [zerotier/github-action](https://awesome-repositories.com/repository/zerotier-github-action.md) (57 ⭐) — A Github Action for ZeroTier
- [composer/composer](https://awesome-repositories.com/repository/composer-composer.md) (29,457 ⭐) — Composer is a command-line dependency management tool for PHP that automates the process of resolving, downloading, and installing external code libraries. It functions by evaluating version constraints defined in a project's configuration file to calculate a compatible dependency tree, ensuring that applications maintain consistent behavior across different development and production environments.

The tool utilizes a structured manifest file as the single source of truth for project requirements and generates a deterministic lock file to record the exact version and hash of every installed dependency. This mechanism ensures reproducible build environments by guaranteeing that every machine uses the identical set of software packages. The system also supports automated package lifecycles, allowing for the addition, update, and removal of components while maintaining a clear record of project state.

Beyond core dependency resolution, the software integrates into automated build pipelines to support containerized application deployment and provides mechanisms for resolving version mismatches. It includes features for managing network proxy configurations and offers an extension architecture that allows third-party code to hook into the installation lifecycle.
- [mealie-recipes/mealie](https://awesome-repositories.com/repository/mealie-recipes-mealie.md) (12,536 ⭐) — Mealie is a self-hosted recipe management platform designed for personal data ownership and household meal planning. It functions as a digital kitchen assistant that allows users to import, organize, and digitize culinary content from websites, images, and videos into a structured, searchable database. The application supports multi-user collaboration through household management, enabling shared access to recipes and meal plans while maintaining distinct permissions.

The platform distinguishes itself through extensive automation and integration capabilities. It features a programmatic interface that supports webhooks and custom actions, allowing users to synchronize shopping lists, trigger external workflows, and display menu information on home automation dashboards. The system also incorporates advanced ingestion tools, including AI-powered ingredient parsing and automated recipe extraction, to streamline the digitization of diverse culinary sources.

Beyond core management, the application provides a robust infrastructure for security and extensibility. It supports enterprise-grade authentication through OpenID Connect and LDAP, alongside granular role-based access control. The system is built for flexible deployment, offering containerized packaging and support for both lightweight file-based storage and high-concurrency relational databases.

The software is distributed as a containerized application, facilitating consistent deployment across various host environments.
- [wyrihaximus/github-action-wait-for-status](https://awesome-repositories.com/repository/wyrihaximus-github-action-wait-for-status.md) (106 ⭐) — Github Action that waits for successful commit status
- [cinnamon/kotaemon](https://awesome-repositories.com/repository/cinnamon-kotaemon.md) (25,139 ⭐) — Kotaemon is an orchestration framework designed for building modular, agentic workflows that integrate document processing, retrieval-augmented generation, and multi-step reasoning. It provides a comprehensive platform for developing document-based question answering systems, allowing users to chain language models, prompt templates, and external tools into complex, automated pipelines.

The system distinguishes itself through a highly modular architecture that emphasizes component-based composition and schema-driven data exchange. It supports autonomous agents capable of decomposing complex queries through iterative processing and tool-calling, while its hybrid retrieval orchestration combines vector similarity and full-text search with re-ranking to improve the accuracy of retrieved context. The framework also features event-driven streaming, which delivers incremental results from long-running pipelines to the user interface in real-time.

Beyond its core reasoning capabilities, the platform includes a suite of functional modules for the entire lifecycle of document-based applications. This includes multi-modal parsing for extracting text, tables, and visual elements from diverse file formats, as well as administrative tools for managing document collections, vector stores, and multi-user access. The system is designed to be interface-agnostic, allowing developers to wrap third-party libraries and external services into standardized, reusable processing units.

The project provides a web-based user interface for interactive querying and configuration, and it supports deployment of private, isolated instances through predefined templates.
- [capsoftware/cap](https://awesome-repositories.com/repository/capsoftware-cap.md) (17,026 ⭐) — Cap is a self-hosted screen recording and video collaboration platform designed for teams to replace synchronous meetings with asynchronous video updates. It provides a comprehensive suite for capturing high-resolution desktop activity, including system audio, microphone input, and camera overlays, which are then processed through an integrated post-production workflow.

The platform distinguishes itself by offering full data sovereignty through containerized deployment and object storage abstractions, allowing users to host their media assets on private infrastructure or S3-compatible buckets. Beyond simple recording, it features keyframe-based video compositing, automated AI-powered transcription, and visual branding tools that enable creators to polish and annotate their content before sharing.

The system facilitates team engagement through a centralized workspace where viewers can provide feedback via timestamped comments, reactions, and playback analytics. It also includes programmatic interfaces for embedding videos into external applications, managing media assets, and automating distribution workflows.

The project is distributed as a containerized application, enabling deployment on private servers to maintain complete control over data storage and access permissions.
- [blinkospace/blinko](https://awesome-repositories.com/repository/blinkospace-blinko.md) (10,601 ⭐) — Blinko is a personal knowledge management system and an LLM-powered knowledge base that enables users to capture and organize thoughts through a bi-directional knowledge graph. It functions as a RAG-enabled note-taking application and a self-hosted Markdown editor, allowing for the creation of permanent documentation and fleeting notes.

The project distinguishes itself by integrating retrieval-augmented generation to provide conversational querying and AI-powered analysis of private document libraries. It supports both cloud-based and local AI model integration, enabling users to perform semantic searches across multimodal content, including PDFs and images, while maintaining data privacy.

The system covers a broad surface of capabilities, including hierarchical tagging, bidirectional linking, and a plugin-based extensibility framework with a dedicated marketplace. It manages data through a combination of hub-based and peer-to-peer synchronization, with support for S3-compatible object storage and automated archiving.

The application is available for cross-platform deployment on macOS, Windows, Linux, and Android, and can be self-hosted using Docker containers.
- [jstawinski/github-actions-attack-diagram](https://awesome-repositories.com/repository/jstawinski-github-actions-attack-diagram.md) (0 ⭐) — The GitHub Actions Attack Diagram provides guidance for identifying GitHub Actions vulnerabilities. Starting with read-only or write access to a GitHub organization/repository, you can follow the diagram to determine how to identify and exploit GitHub Actions misconfigurations, from self-hosted…
- [chartdb/chartdb](https://awesome-repositories.com/repository/chartdb-chartdb.md) (21,286 ⭐) — ChartDB is a database schema visualizer and entity-relationship diagramming platform designed to help developers understand, design, and document complex data architectures. It functions as a visual workspace where users can create and modify database schemas, define table attributes, and map foreign key relationships. By parsing database metadata or SQL scripts, the tool generates interactive diagrams that provide a clear overview of structural interdependencies and data associations.

The platform distinguishes itself through its focus on automated documentation and schema synchronization. It supports programmatic diagram generation and scheduled background tasks that refresh visual representations to reflect changes in the underlying database structure. This ensures that technical documentation remains aligned with the live schema, while features like dependency mapping and relationship cardinality visualization provide deeper insights into how data entities interact.

Beyond visualization, the tool facilitates schema portability by converting diagrams into standard database markup scripts, enabling version control and migration across different environments. Users can manage their workspace through automated layout engines, grid alignment, and filtering tools, or export diagrams as images for stakeholder sharing. The platform also supports embedding interactive diagrams into external documentation and offers containerized self-hosting options for teams requiring private infrastructure and data sovereignty.
- [toeverything/affine](https://awesome-repositories.com/repository/toeverything-affine.md) (69,443 ⭐) — AFFiNE is a collaborative knowledge base and productivity suite designed as a private-first, local-first platform. It provides an integrated workspace that combines structured documents with an infinite digital canvas, allowing users to organize complex information through a block-based model. By prioritizing local data persistence, the platform ensures immediate responsiveness and data sovereignty while maintaining a distributed state for real-time synchronization across multiple devices.

The platform distinguishes itself through a canvas-integrated database engine that enables transitions between free-form whiteboarding and structured tabular views. It utilizes conflict-free replicated data types to manage concurrent edits, ensuring consistent collaboration. Users can extend the workspace with modular artificial intelligence integrations, which use natural language prompts to generate, summarize, and transform content into various visual or structured formats.

The software is built for self-hosting, allowing teams to maintain full control over their data and infrastructure. It supports container-orchestrated deployment, providing tools for managing private workspaces, authentication, and production-ready environments. The system is designed to be installed and configured on personal or team-managed infrastructure, ensuring that all sensitive information remains within a private, secure, and scalable environment.
- [techulus/push-github-action](https://awesome-repositories.com/repository/techulus-push-github-action.md) (75 ⭐) — Github Action for Push by Techulus
- [karancode/kustomize-github-action](https://awesome-repositories.com/repository/karancode-kustomize-github-action.md) (50 ⭐) — :european_castle: Github action for kustomize
- [fatih/vim-go](https://awesome-repositories.com/repository/fatih-vim-go.md) (16,242 ⭐) — This project is a comprehensive development plugin for the Vim text editor, designed to transform the editor into a specialized environment for Go software development. It provides a suite of integrated tools that facilitate the entire development lifecycle, including writing, maintaining, and navigating Go source code.

The plugin distinguishes itself by orchestrating external command-line binaries and language servers to perform heavy analysis, compilation, and formatting tasks as background processes. By mapping editor events to these external tools and utilizing virtual file system synchronization, it maintains editor responsiveness while providing real-time code intelligence, diagnostics, and automated structural changes.

The feature set covers a broad range of development requirements, including automated import management, static code analysis, and integrated build and test execution. It also supports advanced workflows such as program debugging, test coverage visualization, and documentation lookup, all accessible directly within the editor workspace.
- [sameersbn/docker-gitlab](https://awesome-repositories.com/repository/sameersbn-docker-gitlab.md) (8,093 ⭐) — This project provides a containerized DevOps platform by packaging a complete GitLab installation into Docker images. It enables the deployment of a self-hosted environment that integrates Git version control, project management, and continuous integration and delivery pipelines on private infrastructure.

The implementation supports deployment via Docker Compose or orchestration through Docker Swarm, allowing for scalable stacks with integrated container registries. It utilizes environment variables for configuration and supports the offloading of artifacts and backups to remote object storage and external database containers.

The platform covers a broad range of operational capabilities, including identity integration with LDAP, SAML, and OAuth, as well as automated system backup and recovery routines. It further includes tools for secure networking via SSL/TLS configuration, proxy traffic routing, and the hosting of static project pages.

Administrative tasks are managed through command-line utilities for maintenance and health monitoring, while system communication is handled via SMTP and IMAP configurations.
- [c0re100/qbittorrent-enhanced-edition](https://awesome-repositories.com/repository/c0re100-qbittorrent-enhanced-edition.md) (25,128 ⭐) — qBittorrent-Enhanced-Edition is a cross-platform desktop application designed to manage the downloading and uploading of files across peer-to-peer networks. It functions as an open-source file sharer, facilitating the decentralized distribution of digital content by breaking files into smaller pieces for efficient transfer.

The application utilizes a high-performance library to handle complex protocol specifications and employs a mature widget toolkit to provide a consistent native user interface across Windows, macOS, and Linux. It operates as a network traffic manager, incorporating asynchronous event-driven networking and multi-threaded task scheduling to maintain high throughput and system responsiveness during large-scale data transfers.

Beyond core file sharing, the software includes capabilities for automated content acquisition, remote management via web browsers, and granular bandwidth control. It supports extensible search functionality through external scripts and maintains state integrity using a local relational database for metadata storage.
- [atrox/github-actions-badge](https://awesome-repositories.com/repository/atrox-github-actions-badge.md) (207 ⭐) — :shield: Shields.io Badge for your GitHub Actions
- [angristan/openvpn-install](https://awesome-repositories.com/repository/angristan-openvpn-install.md) (15,609 ⭐) — This project provides a shell-based automation utility for deploying and managing OpenVPN servers on Linux hosts. It functions as an orchestration tool that handles the installation of networking software, the configuration of system-level routing rules, and the generation of cryptographic credentials required to establish secure, encrypted tunnels for remote network access.

The tool distinguishes itself by automating the entire lifecycle of a private network gateway, including the management of peer identities and the distribution of standardized configuration profiles. It simplifies the setup of complex network components such as kernel-level packet forwarding and network address translation, allowing administrators to route client traffic through a private host gateway without manual intervention.

Beyond initial deployment, the utility facilitates ongoing administration by providing routines for adding or removing client devices and managing peer access. It enforces secure traffic flow by overriding local client gateway settings and configuring custom DNS resolution, ensuring that all connected device traffic is routed through the encrypted tunnel. The project is distributed as a set of command-line scripts designed for direct execution on Linux server environments.
- [f/prompts.chat](https://awesome-repositories.com/repository/f-prompts-chat.md) (163,814 ⭐) — This platform serves as a centralized management system for organizing, refining, and versioning AI instructions and agent skills. It functions as a repository that enables users to store, categorize, and retrieve structured prompts, ensuring consistent performance across various artificial intelligence models. By integrating with the Model Context Protocol, the system allows external AI assistants and development environments to discover and access these instruction libraries directly.

The platform distinguishes itself through its focus on prompt engineering and automated refinement, utilizing generative analysis to transform basic user instructions into structured, high-performance prompts. It supports multi-tenant white-labeling, allowing for isolated, custom-branded deployments that include secure identity management and granular access control. Additionally, the system incorporates an interactive educational environment designed to teach users effective techniques for constructing and optimizing AI interactions.

Beyond core management, the platform provides semantic search indexing to facilitate efficient discovery of relevant instructions based on user intent. It also supports the development of complex agent skills and includes automated workflows that enforce behavioral standards for AI interactions. The system is designed for both individual use and enterprise-grade infrastructure deployment, offering tools for visual customization and interface localization to meet diverse organizational requirements.
- [nikenano/kubeflow-github-action](https://awesome-repositories.com/repository/nikenano-kubeflow-github-action.md) (35 ⭐) — Repository for makeinga a GitHub Actions for deploying to Kubeflow.
- [rustdesk/rustdesk-server](https://awesome-repositories.com/repository/rustdesk-rustdesk-server.md) (9,943 ⭐) — rustdesk-server is a self-hosted remote desktop server infrastructure designed to manage ID signaling and relay traffic for remote connections between peers. It provides the necessary backend environment to coordinate remote access sessions through rendezvous-based signaling and relay-based traffic forwarding.

The system distinguishes itself with a remote access management console for organizing devices and enforcing security policies, as well as an identity integrator for OIDC-based federation and LDAP directory synchronization. It utilizes geolocation-aware routing to distribute traffic across multiple relay servers and employs UDP-based hole punching to establish direct peer-to-peer links by bypassing firewalls and NAT barriers.

Broad capabilities include comprehensive identity and access management, automated client deployment and branding, and granular security controls such as IP filtering and session lifetime management. The server also supports real-time communication via WebSockets, audit logging, and the ability to host a web-based client.

The infrastructure can be deployed as a server suite on Linux systems or via containerized deployment tools.
- [krucible/krucible-github-action](https://awesome-repositories.com/repository/krucible-krucible-github-action.md) (4 ⭐) — A Github action for creating Kubernetes clusters using Krucible
- [we-promise/sure](https://awesome-repositories.com/repository/we-promise-sure.md) (6,081 ⭐) — Actual Budget is an open-source personal finance application that stores all financial data locally on the user's device using a SQLite database, enabling offline access and complete data ownership without cloud dependency. It packages the entire application stack into Docker containers for one-click deployment on any hosting platform with container support, and connects to over 10,000 financial institutions through the Plaid API to automatically sync account balances, transactions, and investment data.

The application implements a monthly budget model that tracks spending against category limits with real-time balance calculations and overage alerts, while applying user-defined categorization rules to incoming transactions in real-time using pattern matching on merchant names, amounts, and descriptions. It answers natural-language questions about account balances, spending, and investments by analyzing local financial data through an integrated AI assistant, and builds the user interface as a client-rendered React single-page application that communicates with the backend through REST API calls.

The system supports setting spending limits per category and tracking actual spending against those budgets, comparing spending over time and highlighting overages. Users can link bank accounts, investments, and crypto from multiple institutions to monitor total net worth in one place, add accounts through custom forms or import them from CSV files, and search transactions by date, account, category, or merchant. The application populates itself with sample financial records so new users can explore features without entering real data.
- [cockroachdb/cockroach](https://awesome-repositories.com/repository/cockroachdb-cockroach.md) (32,207 ⭐) — Cockroach is a distributed SQL database designed to scale horizontally across multiple nodes while maintaining strict ACID compliance and global data consistency. It functions as a relational database engine that automatically partitions data into ranges, rebalancing them across a cluster to accommodate growing storage and throughput requirements. By utilizing a distributed consensus protocol, the system ensures that all nodes agree on the order of operations, providing fault tolerance and continuous availability even in the event of hardware failures.

The system distinguishes itself through a layered architecture that separates the relational SQL abstraction from a distributed key-value store. It achieves global consistency without requiring perfectly synchronized hardware clocks by employing a hybrid logical clock synchronization mechanism. To support high-concurrency environments, it utilizes multi-version concurrency control and lock-free transaction execution, which allow for consistent snapshots and efficient conflict resolution. Furthermore, the engine is built for compatibility, implementing the standard wire protocol to support existing relational database drivers and tools.

Beyond its core transactional capabilities, the platform includes comprehensive tooling for cluster orchestration, security, and performance diagnostics. It supports a variety of deployment models, ranging from self-hosted on-premises configurations to fully managed cloud services. The system provides a command-line interface for session management and query execution, ensuring that administrators can monitor cluster health and manage workloads through standard relational interfaces.
- [renovatebot/renovate](https://awesome-repositories.com/repository/renovatebot-renovate.md) (21,796 ⭐) — Renovate is a GitOps-driven dependency management engine designed to automate the maintenance of software projects. It functions as an automated update tool that scans repository files to identify outdated dependencies, fetches the latest compatible versions from external sources, and generates pull requests to apply those updates. By integrating directly with code hosting platforms, it synchronizes project dependencies through declarative configuration files, ensuring that software components remain current and secure.

The project distinguishes itself through its platform-agnostic architecture and comprehensive policy enforcement capabilities. It utilizes a hierarchical configuration system that allows for the propagation of standardized update policies across multiple repositories, while supporting custom dependency extraction for non-standard or proprietary file formats. To ensure reliability, it incorporates confidence signals derived from community data and provides intelligent automerge logic that triggers only when updates meet specific safety criteria.

Beyond core updates, the tool manages the full lifecycle of infrastructure components, including container image tags and pipeline versions. It handles complex tasks such as lockfile synchronization by invoking native build tools in isolated environments, and it maintains supply chain security by monitoring for abandoned packages and integrating with private package registries. The system also offers granular control over update scheduling, grouping, and reviewer assignment to minimize developer overhead.

Renovate is distributed as a containerized application or package, supporting deployment across various infrastructure environments. It provides extensive observability through operational dashboards, debug log visualization, and status check labeling to assist in monitoring the health and progress of automated update workflows.
- [athensresearch/athens](https://awesome-repositories.com/repository/athensresearch-athens.md) (6,298 ⭐) — Athens is no longer maintainted. Athens was an open-source, collaborative knowledge graph, backed by YC W21