Open-source alternatives to Sftpgo

Filestash is a unified storage management platform that provides a web-based interface for browsing, managing, and accessing files across diverse local and cloud storage backends. It functions as a centralized gateway, aggregating services such as S3, SFTP, WebDAV, and FTP into a single, consistent environment for remote filesystem administration and secure document handling. The platform distinguishes itself through a modular, plugin-based architecture that supports custom storage drivers, authentication providers, and authorization logic. It includes built-in capabilities for server-side me

SeaweedFS is a distributed object store and high-performance file system designed to manage massive volumes of unstructured data. It utilizes a decoupled architecture that separates metadata management from raw data storage, allowing for independent scalability and the efficient handling of billions of files. By providing a POSIX-compliant interface, it enables applications to interact with a unified namespace while maintaining the performance characteristics of a distributed object store. The system distinguishes itself through a multi-region data fabric that supports active-active replicati

This project is a community-curated directory of open-source software designed for deployment in private server environments and home labs. It serves as a comprehensive resource for discovering independent, self-hosted alternatives to mainstream cloud services, enabling users to maintain full data ownership and control over their digital infrastructure. The directory is structured through a hierarchical taxonomy that organizes a vast collection of applications into logical categories, ranging from media management and data analytics to private communication and team productivity tools. It dis

OpenObserve is a unified observability data platform designed to ingest, store, and analyze logs, metrics, and traces. It functions as a cloud-native monitoring tool that centralizes telemetry from diverse sources, including standard collectors and cloud service providers, into a single, scalable system. By utilizing a columnar storage engine backed by object storage, the platform enables efficient long-term data retention and high-performance analytical querying. The platform distinguishes itself through deep integration with artificial intelligence, allowing users to query data using natura

dufs is a self-hosted file manager and static file server that provides HTTP file hosting and WebDAV capabilities. It functions as a tool for sharing files over HTTP and managing folders remotely through both a web-based interface and the WebDAV protocol. The server distinguishes itself by mapping incoming requests directly to a local directory structure and offering a single-binary distribution for deployment. It supports the mounting of the server as a network drive via WebDAV and allows for the replacement of the default web interface using customizable asset overlays. The project covers

Parse Server is a backend-as-a-service solution and Node.js framework that provides a ready-to-use REST and GraphQL API for mobile and web applications. It functions as a core backend infrastructure for managing database schemas, user authentication, and API routing. The system distinguishes itself with a real-time data engine that pushes database updates to clients via WebSockets and a GraphQL server that automatically generates schemas based on application data models. It also features an adapter-based storage layer that abstracts interactions with various cloud and local backends. The pla

aliyundrive-webdav is a server-side gateway that translates AliyunDrive cloud storage into a WebDAV interface. It functions as a self-hosted cloud file server that maps remote storage accounts to a local network drive, allowing users to manage files through standard network drive clients. The project distinguishes itself by routing data requests directly between the client and the cloud provider to enable direct media streaming without server-side proxying. It utilizes a terminal-based QR code authentication system to exchange scans for refresh tokens and maintains a secure cloud gateway usin

Boto3 is the AWS SDK for Python, providing a programmatic interface for managing and automating AWS cloud infrastructure and services. It serves as a cloud management API client and resource manager for provisioning, configuring, and scaling virtual servers, databases, and storage. The library enables the implementation of infrastructure-as-code through declarative templates and scripts, allowing for the deployment of identical resource stacks across multiple accounts and geographic regions. It also provides a framework for coordinating distributed workflows, serverless functions, and contain

Element Web is a web-based communication client used for real-time messaging and collaboration via the decentralized Matrix protocol. It functions as an end-to-end encrypted messenger, a VoIP client for voice and video conferencing, and an interface for interacting with integrated bots and external bridges. The project distinguishes itself through a modular architecture that supports runtime module loading and external script imports to extend core capabilities. It provides extensive white-labeling options, allowing for the customization of application branding, visual themes, and the use of

Polis is a self-hosted identity provider designed to manage federated authentication and user lifecycle operations within private infrastructure. It functions as a centralized hub for identity management, enabling organizations to maintain control over user data while enforcing security policies across diverse environments. The platform distinguishes itself by acting as a protocol-bridging gateway that converts complex enterprise authentication standards, such as SAML and OIDC, into a unified OAuth 2.0 flow. It further automates administrative tasks by synchronizing user and group information

Kanidm is a centralized identity management server designed to handle authentication, authorization, and directory services across distributed infrastructure. It provides a comprehensive framework for managing human and service accounts, utilizing a schema-driven database to store identity records, group memberships, and system attributes. The platform supports a wide range of authentication methods, including passkeys, passwords, and standard protocols like OAuth2, OIDC, LDAP, and RADIUS. The system distinguishes itself through a granular access control engine that enforces security policies

This project is an open-source identity provider and single sign-on platform that centralizes user authentication for multiple web applications and services. It functions as a multi-protocol authentication gateway, verifying user identities and issuing tokens through the CAS protocol as well as industry standards including SAML, OAuth2, and OpenID Connect. The system acts as a federated identity server, allowing authentication to be delegated to external third-party or corporate identity providers. It distinguishes itself through identity attribute governance, which manages which specific use

This project is a GitOps infrastructure framework designed for managing bare metal servers, container clusters, and networking. It serves as a declarative system for orchestrating the deployment and lifecycle of self-hosted services, using Git as the source of truth to synchronize the desired state of the environment. The framework differentiates itself through a comprehensive automation suite that covers the entire hardware-to-service pipeline. It includes a PXE-based bare metal provisioner for network booting and operating system installation, alongside a lightweight container orchestration

Jeesite is a full-stack low-code development framework designed for building enterprise administrative portals using Spring Boot, MyBatis, and Vue. It functions as a comprehensive platform for creating administrative dashboards with integrated role-based access control and organizational data permission systems. The framework distinguishes itself through a combination of automated CRUD code generation and an integrated RAG platform that connects large language models to enterprise data via vector stores. It further incorporates a BPMN-based workflow engine to automate complex business process

YunoHost is a self-hosted server management platform designed for deploying, configuring, and maintaining a suite of open source applications on a private server. It functions as a package-based application orchestrator that installs and updates software from a curated catalog using standardized deployment scripts. The platform features a centralized identity management system using a directory service to synchronize user accounts and credentials across hosted applications for single sign-on access. It includes an integrated reverse proxy to route network traffic to backend services based on

Zeebe is a cloud-native workflow engine and distributed state machine designed for business process orchestration using BPMN and DMN standards. It operates as a high-performance gRPC workflow runtime that executes complex business processes through a partitioned event-streaming architecture. The system also functions as an orchestrator for large language model agents, coordinating AI reasoning and tool use within deterministic business processes. The engine is distinguished by its peer-to-peer broker networking and a consensus-based data replication model that ensures high availability and fa

dzzoffice is an enterprise collaboration platform and digital workplace automation suite. It functions as a collaborative document management system and a cloud storage gateway, providing a centralized hub for team communication, task tracking, and corporate directory services. The platform is distinguished by its ability to mount multiple external cloud storage providers and private drives into a single unified interface for file management. It supports real-time co-authoring and previewing of office documents through integration with external office servers and maintains a structured intern

XWiki Platform is a collaborative content management system and enterprise wiki designed for creating, organizing, and sharing structured documentation. It functions as a Java-based application framework that enables teams to build data-driven business applications directly within a web environment. By combining a flexible knowledge base with modular development tools, the platform supports both standard document management and the creation of custom, interactive software solutions. The platform distinguishes itself through a highly extensible architecture that allows for deep customization w

BunkerWeb is a containerized suite of infrastructure tools that functions as a cloud-native web application firewall and Nginx reverse proxy. It provides a security layer for web applications, combining traffic routing with automated SSL certificate management and a web-based security dashboard for monitoring and configuration. The project distinguishes itself through its deep integration with container orchestrators, serving as a Kubernetes ingress controller that automates security settings and service discovery via container labels. It features a plugin-based extension model and a manageme

FreeScout is a self-hosted, open-source help desk and ticket management system built with PHP. It functions as a customer support platform that enables teams to manage shared inboxes and organize customer email conversations into tickets. The platform distinguishes itself as a multi-channel support dashboard that integrates customer relationship management and a knowledge base system. It provides tools for tracking detailed customer profiles and organizational records while offering a programmable interface to manage and expose support articles. The system covers a broad range of support cap

Kubero is a self-hosted Platform as a Service (PaaS) that simplifies the deployment, scaling, and management of containerized applications on Kubernetes. It functions as an application manager, CI/CD orchestrator, and multi-tenant manager, allowing users to run workloads without writing manual configuration files. The platform distinguishes itself through automated image synthesis, transforming source code from Git repositories into deployable containers via buildpacks, Dockerfiles, or nixpacks. It implements a GitOps delivery model with automated pipelines that trigger builds on push events

Wekan is an open-source, self-hosted Kanban project management tool used for organizing workflows through boards, lists, and cards. It is a real-time web application that allows teams to manage tasks on private infrastructure. The platform distinguishes itself with extensive data migration tools, specifically for importing boards and cards from Trello. It supports enterprise-grade identity integration via LDAP, OpenID Connect, and OAuth2, and offers flexible storage options including PostgreSQL as a primary relational backend and pluggable cloud storage for attachments. The system covers a w

Copyparty is a self-hosted file server that provides a browser-based interface for managing, browsing, uploading, and downloading files. It utilizes a virtual file system abstraction to map diverse storage backends and network-attached devices into a unified directory structure, allowing for consistent file access across various storage environments. The platform functions as a cloud synchronization gateway, enabling automated data backups and transfers between local storage and remote cloud providers through integration with standard command-line tools. It also serves as a distributed storag

WebClients is a secure productivity suite that provides a unified web platform for encrypted email, calendars, and file storage. It functions as a browser-based interface for sending and receiving end-to-end encrypted communications and managing secure digital identity. The project integrates a centralized identity and access manager to coordinate account security credentials and authentication settings across services. It also includes a secure file browser for organizing private documents and a dedicated interface for managing virtual private network connectivity settings. The suite covers

Octelium is a zero-trust network access platform and identity-aware proxy designed to secure private HTTP, SSH, and SQL resources. It functions as a secure gateway that validates human and workload identities using OIDC, SAML, and FIDO2 passkeys before granting access to internal applications and SaaS APIs. The system is distinguished by its secretless access broker, which injects credentials—such as API keys, passwords, and AWS Sigv4 signatures—at the gateway level so users can access databases and cloud resources without managing secrets. It further specializes in AI gateway administration,

Transfer.sh is a self-hosted file storage server designed for rapid data sharing through a command-line interface. It functions as an encrypted hosting platform that allows users to upload and download files using standard HTTP requests, facilitating direct data transfer between systems without the need for external accounts or complex configurations. The service distinguishes itself by processing data as continuous streams, which minimizes memory usage during large transfers. It provides granular control over file availability through automated lifecycle management, allowing administrators t