#DevOps
200
2026-09-25
mikehasa/golive-skill
S
Take your agent-built product live: hosting, database, domain, email, payments — on your own accounts. Open-source Agent Skill + zero-dependency Node CLI: detect → plan → approve → apply → verify. No GoLive account, backend or telemetry.
2026-09-03
Show HN: Aura – a Rust agent that investigates and fixes production incidents
S
We run a SaaS that handles petabytes of data. Our SRE team experimented with using claude, openclaw, langchain, etc. within our incident response workflows. We struggled with overflowing context, lethal trifecta vectors, hallucinations, and burned a lot of frontier tokens mostly on easy work. Approval fatigue was a challenge, and we drew a hard line at relaxing permissions in production. Long story short, we built and open-sourced AURA, a Rust-based harness specifically designed for the type of operations work which routinely involves large volumes of telemetry data and coordinated investigations across many domains of knowledge / state. We have found even on open-weights models, root cause accuracy has been very good, and remediation actions are guarded with human-in-the-loop. AURA runs from a centralized configuration file where workers are defined and scoped to task domains, (e.g. logging review, metrics analysis, and git/scm related queries). All permissions, tools access, LLM backend(s), worker prompts, and the main coordinator prompt are also defined in code. Permitted tool use is enforced deterministically outside the agent's context, so the agent cannot grant itself capabilities through prompting. AURA also handles the rest of the execution layer, such as human approval for sensitive actions and fault tolerance. A lot of thought went into context window management: large tool outputs and worker responses are persisted to disk and agents are given tools to slice/read as needed. The project is Apache 2.0. You can install rpm/deb/brew natively or pull the source and build your own. It runs either as an assistant on your workstation, or as a daemon that you can connect to via any OpenAI-compatible frontend. The GitHub repo is here: https://github.com/mezmo/aura/ The whole thing is free/Free. No signups or open core trapdoor. Demo: We put together an 8-minute video showing a checkout outage resolved by following evidence from several different systems: https://www.youtube.com/watch?v=TERHoRzT8cE tl;dw: 502s from a checkout service cause Grafana to trigger an incident via PagerDuty. AURA (using DeepSeek-V4-Flash) uses its workers and tools to correctly determine root cause as a memory leak in a downstream service, and attributes the incident to a defect in a recently merged PR. The demo then concludes with a human-gated tool call to GitHub, where AURA documents the exact lines of code that are causing the problem, and recommends a fix. Once the PR is deployed, AURA validates that the errors are clearing and transactions are no longer failing. The whole time, AURA’s leaving an audit trail of OTEL events into Phoenix. Technical details: AURA uses an agent coordinator that drafts, executes, and supervises DAG flows through user-defined worker agents to solve complex investigations in parallel. Worker agents are bound to strongly typed durable artifacts used as evidence packets, and the system discourages wasteful recalculation of remote data. AURA also has a powerful header routing system that doesn’t allow the agent to actually touch your keys. HITL interrupts over webhook are first class citizens and have a schema that is easy to adapt to your own workflow. HA deployment options are coming soon. What’s still rocky: - We’re currently working on the async input system for when you’re running AURA as a service. Right now the API just accepts a request, and streams messages until the main loop completes. It’s easy to integrate into a workflow, but the logic required winds up being heavier than it ought to be. - Because there’s no inbound webhook interrupt mechanism, automating AURA for IR requires middleware to invoke it or it needs to poll an MCP for alert escalations. We’re looking for users, contributors, guidance on where to take this next, or just GitHub stars. Looking forward to reading and responding to feedback here.
2026-10-04
Show HN: Offrun – manage every coding agent from one workspace
S
Run Claude Code, Codex, AGY, and Grok Build side by side. See who is working, who needs you, and what every account has left.
2026-09-23
Show HN: Drop – A rootless Linux sandbox with gVisor support
A
I created Drop because I always felt uneasy installing and running third-party programs using my main user account. A single compromised dependency means a full compromise of the system. What is even worse, because I ship software from my computer, a single compromised dependency can lead to compromise of all the users of my software. Containers and VMs are one solution, but for local work, they are often detrimental to productivity. It takes effort to configure a machine with all the tools and configs needed for productive work, but a container or a VM will be stripped of all these tools. This is great for production deployments, where the aim is a reproducible system with minimal dependencies, but can get in the way of productive local work. Drop is language independent, but the workflow is inspired by Python's virtualenv. With virtualenv the environment isolation is only a convention that relies on installed dependencies being good citizens. With Drop the isolation is enforced. Each Drop environment gets its own writable and easily disposable home dir, with only selected config files and dirs from the original home mounted, mostly read-only. Drop uses Linux namespaces for isolation (user, mount, network, PID, IPC, cgroup), doesn't require root and, as an option, uses gVisor user-space kernel, which adds protection against exploiting host kernel vulnerabilities to escape the sandbox. I don't want to make the introductory post too lengthy, but I'm here to answer any questions and give any additional technical details. Note: This is my 3rd submission of the project, the first two did not draw attention. Since then I have added support for gVisor and created a project website to better explain the concept and organize documentation.
2026-10-22
HOSTED-POWER/php_uploadprogress_guard
S
Protects an unpatched PHP against php2shell (CVE-2026-109618 / CVE-2026-109619): a small extension that mirrors the official fix component by component and steps aside once the engine carries it. PHP 5.6-8.5; Sury, cPanel EA4, DirectAdmin, Docker, Windows.
2026-08-26
Reality-JH/FailoverAI
A
Open-source gateway for reliable image, video and LLM jobs. | An open-source gateway for reliable image, video, and LLM jobs.
2026-11-04
Balanov/skein
A
Fail-closed swarm orchestration with epoch-fenced work and late-completion rejection.
2026-09-08
Show HN: Wg-admin – web UI for an existing WireGuard host
A
Reads /etc/wireguard, lets you add/edit/remove peers, applies with wg syncconf (no interface bounce). Does not install WireGuard or rewrite your PostUp/NAT. That's all
2026-11-09
kunchenguid/headless
A
Agent skill that sets up a headless Mac, Linux or Windows machine over SSH, step by step, without ever seeing the admin password.
2026-09-18
agentscope-java/idempotency-shield
A
Express middleware that makes handlers safe to retry — replays the cached response for a duplicate Idempotency-Key instead of re-running it, with pluggable in-memory or Redis storage.
2026-10-19
Show HN: Ranet3 – High performance policy routed IPsec mesh SD-WAN
B
btw this is already running on all my machines (including a macbook), and i've configured all of them to have routable public ip addresses ;) especially for the mac, my ISP is SFR (over coaxial connection) with only dynamic ipv4, i can use this to get stable v4/v6 addresses very easily for all my devices behind the router ios/android app soon^{TM}
2026-09-30
sudiptacmd/homedroid
A
Turn an old Android phone into a home server: SSH, web hosting, Jellyfin with hardware transcoding, Immich, qBittorrent, Home Assistant and a web dashboard. No root.
2026-10-23
Spectrmachina/Ztrust
B
Zero-trust supply-chain security for open source: detects malicious & vulnerable dependencies, typosquats, leaked secrets and unsafe GitHub Actions — and pays independent researchers in shielded Zcash via a front-running-proof bounty protocol.
2026-09-30
Show HN: NSL – WSL for Linux
B
One of the things that Windows really got right is WSL2. I drive an atomic Linux distro for daily use, but wanted a way to develop with multiple different distros with that same WSL UX. NSL is my answer. It is a faithful reproduction of the developer experience, powered by a single VM that hosts one or more systemd-nspawn containers with your development instances. Host file edits and port sharing come along for the ride, just like WSL. Take a look and tell me what you think... It's yet another step in my long journey to keep my host installation free from all the changing and breaking dev dependencies that force a reinstall every few months.
2026-08-26
wcnmd666/vps-doctor
A
Diagnose common Linux server failures in one command — then fix them safely.
2026-10-12
casareanderson/sieve
A
Find the CVEs that matter on a Linux box and its running containers. Reads the package lists already there, asks OSV.dev, ranks by CISA KEV and EPSS. No scanner binary, no database, no server.
2026-08-29
chrisgreg/boop
B
A tiny, self-hosted notification inbox for developers. Something happened in one of your apps; Boop tells you on your phone.
2026-10-12
datosh/nixos-vex
A
OpenVEX feed and NixOS module to manage NixOS CVEs, evaluated against your system's configuration.
2026-10-09
fdaforno/freecenter
A
A vCenter-style management console for the free VMware ESXi hypervisor: web UI, REST API, migration between hosts, backups, Terraform provider
2026-09-10
senoff/self-hosted-ci-runner
A
Stand up self-hosted GitHub Actions runners on one box, provisioned so heavy CI jobs don't OOM or fill the disk (per-runner swap/scratch + reaper). Parameterized; Hetzner reference config included.
2026-08-31
OthmaneBlial/MobaRust
B
Free, open-source MobaXterm alternative built with Rust: SSH, SFTP, SCP, terminals, tunnels, serial, Telnet, diagnostics, and remote administration.
2026-08-24
bearBoy80/opsflare
A
Unofficial Cloudflare multi-account client for iOS & Android (Expo). Unofficial Cloudflare multi-account mobile client. Usable with just an API token; OAuth requires deploying oauth-relay first and registering your own client.
2026-10-11
KoninMikhail/workhold-durable-work-queue
A
Durable per-application work queue with named queues, fenced leases, and atomic follow-up tasks.
2026-10-07
aireet/kube-bmc
A
Your servers' BMCs as Kubernetes resources: zero-config in-band discovery, hardware health, Prometheus metrics, a slick dashboard and out-of-band power control. IPMI & Redfish.
2026-09-13
nefarius/vd_agent
A
Windows SPICE guest agent. Community-maintained fork of the abandoned freedesktop.org vd_agent.
2026-10-26
mountain-beaver/vps-forge
A
Agent Skill that lets Claude Code, Codex, Cursor, Copilot and other AI agents set up and harden a Debian/Ubuntu VPS without locking you out: SSH, firewall, fail2ban, updates, Docker, TLS, backups, phone alerts. Benchmarked on 120 VM runs.
2026-10-07
thkukuk/sd-report-collector
A
Server counterpart to "systemd-report upload". Accepts report pushes over mTLS, stores each one zstd-compressed under a per-hostname directory, and runs configured plugins against the saved file.
2026-09-10
ttncode/wsl-reclaim
A
Reclaim WSL2 disk space for real: clean inside the distro, then compact the .vhdx on Windows. Explains why diskpart silently does nothing on sparse disks.
2026-10-23
mpyw/php-eol-CVE-2026-109618-109619
A
PHP 7.4 / 8.0 / 8.1 Docker images with the CVE-2026-109618 / CVE-2026-109619 fix backported
2026-09-17
dmtrKovalenko/bashka
B
Stop running unverified bash scripts to install software! curl <url> | bashKA for static verification of bash script safty and managing installed software
2026-09-17
Show HN: Fail2zig. A single-binary fail2ban replacement written in Zig
B
Built fail2zig because I like fail2ban's log-to-ban model but wanted a smaller runtime with explicit limits on the work attacker controlled input can cause. fail2zig is a single static binary with bounded parsers instead of a regex engine, SQLite-backed durable state, and nftables enforcement directly through netlink. Also has the ability to inspect and migrate existing fail2ban configurations. I just release 0.4.0 today which is the point where I'm more comfortable putting it in front of more people. Source: https://github.com/ul0gic/fail2zig Wouldn't mind feedback from people running fail2ban today, including reasons you would not switch.
2026-09-13
PG-Circuit/pg-circuit
A
Circuit breaker for production PostgreSQL. Native extension that can ALLOW, WARN, or BLOCK dangerous SQL based on live database state. Apache 2.0.
2026-10-26
byjaps/prox-kiox-wayland
B
Proxmox VE kiosk on the node's local display: cage/Wayland (works with lockdown=integrity) + autostart that is safe on headless nodes.
2026-09-16
jasonbitsmith/vps-first-steps
B
A single, readable bash script that takes a fresh Ubuntu/Debian VPS from default install to a hardened, ready-to-use server.
2026-11-07
devvmhq/devvm
B
One VM for every project. An isolated sandbox with your project’s toolchain, ready for you or a coding agent to start coding
2026-11-07
reason-machines/aspen
B
A self-hostable Git server for agent-scale traffic: packs in object storage, per-branch history in Postgres. Pre-alpha.
2026-10-29
yt1988/me2cloud
B
Free cloud latency test from your own browser: median, jitter and loss to 360+ regions of AWS, Azure, Google Cloud and 14 more providers. 10 languages.
2026-10-09
Abhishek-Gali/HookRelay
B
Security-hardened webhook ingestion & multi-destination delivery gateway (GitHub ➔ Discord, Slack, HTTP) with HMAC-SHA256 verification, durable SQL queueing, fencing leases, smart retries, and DLQ.
2026-10-03
kindlingai/kindling-spark-os
B
Minimal read-only OS image for GB10 (DGX Spark / ASUS GX10) boxes
2026-09-24
jpolec/hetzner-cloud-audit-skills
B
Evidence-backed attack paths, drift, and cost auditing for Hetzner Cloud.
2026-09-20
aozorae/EdgeSSH
B
A lightweight WebSSH workspace on Cloudflare Workers with host management, encrypted storage, SFTP, process monitoring and globe visualization.
2026-09-11
Show HN: Syq – copy files between machines fast (better than rsync)
B
I got frustrated with the slowness of rsync and made an alternative that works faster by using multiple parallel connections, direct encrypted TCP when available, and other optimizations. I also added cool features like the ability to maintain a persistent ssh connection to the server for fast one-offs, the ability to download to your laptop while working in an ssh shell on a server, and the ability to do direct remote-remote transfers without forwarding your ssh agent (by using restricted ssh keys on the receiver that will only execute a specific request signed with the key on your laptop). It is also designed to be more robustly/flexibly scriptable than alternatives.
2026-10-20
theweakestharrison/dumpcat
B
Backup, restore and point-in-time recovery for MySQL and MariaDB.
2026-10-04
Cherry/cloudflare-drizzle-tracing
B
Cloudflare Workers tracing spans for Drizzle ORM, for any driver
2026-09-27
agentscope-ai-java/redis-guard
B
Block FLUSHALL, KEYS and other dangerous Redis commands by policy, before they reach production.
2026-09-17
kdbhalala/avdslim
B
⚡ Drop Android Virtual Device (AVD) emulator RAM from ~8GB to ~1.5GB on Apple Silicon & Linux. Inspired by simslim.
2026-09-08
itsjasur/uzbekistan-geocoder
B
Self-hosted forward and reverse geocoding for Uzbekistan with Nominatim, Docker Compose, and an optional Caddy proxy.
2026-11-02
lucasforster1108-boop/oracle-snatch
B
Keep asking OCI for a free-tier A1.Flex ARM instance until capacity shows up. One Python file, official API only.
2026-10-28
rudderlabs/devbox
B
Open source autonomous engineering harness in your cloud. One sandbox per task, no real secrets inside.
2026-10-26
aiden0rchad/homelab-atlas
B
Design polished homelab diagrams with real app logos. Self-hosted, Docker-ready, local-first, and no AI required.
2026-10-21
Show HN: Death Plan Switch, a self-hosted dead man's switch for solo devs
B
Hi HN, I'm Peter Bishop and I've been working in graphics and web tech for over 25yrs. I've recently launched Death Plan Switch to solve a major problem in my succession plan. What if I go missing or die? The right people are told and my business can continue to operate for my clients. There's a backstory to this project, I was hospitalised in 2012 and lost my business back then and I couldn't get the data to my technical 2IC in time without frustrating my clients. Death Plan Switch solves this problem, it's free to download and use or study under the MIT license. I've been using it for the last few weeks. It was authored with the help of Claude Code after writing an extensive MD document and it passed 42 unit tests. I hope you get some use out of it, or it inspires your own succession plans. My clients are telling me this is a strong sales feature when they trust me with their hosting and technology accounts. Happy to answer any questions. Kind regards, Peter Bishop.
2026-09-29
hakureiyuyuko/go-acs
B
Single-binary, zero-external-middleware TR-069/CWMP ACS (Go + SQLite): manage ONTs and FTTR hosts — view info, change config, run diagnostics, manage sub-devices and terminals
2026-09-27
dafarusd/keephaven
B
Private home cloud OS for the Raspberry Pi 5: a NixOS image with six self-hosted apps, a recovery partition and signed updates
2026-09-23
ghuntley/nix-compact
B
Native compact Nix build output with full local logs, bounded diagnostics, and a flake interface
2026-09-10
lynchest/runnel
B
A small, secure HTTP egress gateway with per-domain rate limiting, circuit breaking, queueing, caching, and SSRF protection.
2026-09-06
KikeMuller/Get-ServerFullReport
B
Inventario as-built y health check de servidores Windows en un solo .ps1
2026-10-08
quinnovator/inhouse
B
Your own app platform on one box, with your tailnet as the front door
2026-10-04
fatihaydost/porthole
B
KDE Plasma 6 system tray widget: switch SSH port forwards (ssh -L tunnels) on and off, and see every port listening on your machine.
2026-09-29
bjarneo/st8ks
B
A fast Kubernetes desktop client for Linux, macOS and Windows that finds what is broken and helps you fix it
2026-09-25
agentthink/ipc-edge
B
Cross-platform PLC communication and edge gateway tool — unified collection across multi-brand protocols, MQTT offline caching and reporting, collection and cloud upload in one program.
2026-09-17
theoephraim/awesome-cloudflare-selfhosted
B
🍊☁️ Open-source* apps that replace a SaaS product, running in your own Cloudflare account
2026-09-08
drJhonatan00/Pulse
B
Pulse is a lightweight, responsive Progressive Web App designed to track, visualize, and analyze release downloads and repository metrics across GitHub. Built with vanilla JavaScript and styled with a sleek dark-mode design system, Pulse provides instant insights into your release assets without requiring authentication or backend infrastructure.
2026-10-02
thedyerman/mikrotik-home-netflow-plus
B
Self-hosted NetFlow/IPFIX traffic monitor for MikroTik RouterOS 7 with a live web dashboard.
2026-09-28
madeye/ServerBox
B
ServerBox: turn a used Android phone into a Linux server, no root required. Alpine, Arch, Debian, Kali and Ubuntu with an always-on SSH server.
2026-11-09
symansun/doops
B
No SSH needed to operate and maintain any machine | DoOps: an auditable remote operations entry point with a public gateway + intranet agent
2026-10-09
HaticeGuzell/multi-database-mcp-server
B
Read-only Model Context Protocol server for MySQL and PostgreSQL, built with TypeScript, TypeORM and Docker.
2026-10-03
choyiny/gitorange
B
A self-hosted GitHub for your team, with no servers to run. Single-tenant git hosting with pull requests, built on Cloudflare Workers, D1, and Artifacts.
2026-09-29
Silent-Watcher/nestjs-quota
B
Production-grade API quota enforcement and usage metering for NestJS
2026-09-16
YongshengWin/VpsCT
C
A self-hosted server management panel for individuals and small teams, centrally managing VPS status, traffic, service configuration, and resource sharing.
2026-09-15
Lukitaduarte/DevSweep
B
macOS menu bar app that finds dev processes stuck in limbo and cleans the caches, builds and simulator data that Flutter, iOS, Android, Node and Go leave behind — one click, YAML-defined stacks
2026-09-12
Mic92/repkgs
B
A package set on stock Nix: cheap eval, relocatable outputs, nushell builders, LLVM-only cross, compile cache in the compiler driver
2026-09-11
eskim2001/dsh-cloud
C
dshcloud: a multi-tenant platform for deploying and hosting DeepSeek Harness (dsh) instances, supporting self-hosted or cloud deployment. Deploy and host DeepSeek Harness (dsh) instances — self-hosted on your own server or cloud-hosted: a multi-tenant platform with isolated Docker containers, persistent workspaces and resource quotas.
2026-09-07
evangelosvlachos96-dotcom/booking-microservices
C
Flight booking system built as .NET 10 microservices with Vertical Slice Architecture, DDD, CQRS, Event Sourcing, gRPC, RabbitMQ, Wolverine, PostgreSQL, MongoDB and .NET Aspire.
2026-10-28
lichenlang89/dn64
B
DN64 dual-stack experimental network registry | RPSL-style objects, signed PRs and automated validation
2026-10-21
DejavuMoe/Pail
B
Cross-platform desktop manager for S3-compatible object storage: Amazon S3, MinIO, Cloudflare R2, VersityGW, Wasabi and other services that speak the S3 API.
2026-10-21
migasrias2/geckobox
B
Run Claude Code, Codex or any coding agent on any of your computers, and jobs across all of them at once. Free, MIT, no relay, no limits.
2026-10-17
joelhooks/alchemy-celld
B
Alchemy provider for self-hosted celld instances: systemd units, SeaweedFS object store, ten-port layout, restart gate. Topology is injected data.
2026-10-03
JordyThery/Profile2Blueprint
B
macOS app that migrates Jamf Pro classic configuration profiles to Jamf Platform Blueprints via the in-place Classic-to-DDM transform. Created by Jordy Thery.
2026-09-19
dashscope-sdk/idempotency-shield
B
Express middleware that makes handlers safe to retry — replays the cached response for a duplicate Idempotency-Key instead of re-running it, with pluggable in-memory or Redis storage.
2026-09-10
supabase-multitenant/supabase-multitenant
B
supabase-multitenant lets you self-host Supabase as your own Supabase.com-style cloud, running anywhere you choose—VPS, Coolify, Dokku, Dokploy, or your own infrastructure. Manage everything from one platform: 1 infrastructure, many isolated Supabase databases, giving you flexible deployment, control, and scalable multitenancy.
2026-09-08
Show HN: Brw - better than Claude chrome
C
Cross harness browser automation. Beats Claude chrome. Allows remote over ssh (view it working on your laptop whilst your big rig does the AI bit).
2026-11-05
aws-samples/sample-multilingual-ivr-contact-center-for-amazon-connect
B
Deploys a multilingual IVR contact center on Amazon Connect with one AWS CDK stack: caller identification, per-agent case isolation, returning-caller routing, supervisor case assignment and voicemail-to-case with Voicemail Express.
2026-10-13
Shepard86rus/3x-ui-dual-domain
B
Installer and healthcheck for the lucx-ui VPN panel on your own server: two domains, nginx SNI routing on 443, TLS/Reality, Hysteria2, AmneziaWG, decoy sites — all in one script
2026-10-03
Show HN: Pi pod – Run your pi coding agent in sandboxes on your own server
C
pi pod runs sessions of the pi coding agent in isolated sandboxes ("pods") on a server you run, in composable environments. ---- Since moving my company towards AI-native work, I have been really frustrated by the state of "agentic engineering" environments. Products by the labs (claude code, codex) lock you into a single provider for your tokens. Agnostic solutions (factory, devin, arguably cursor) make you pay per-token costs. None of these products allow you to fully customize the harness, and of course they all run on someone else's infrastructure. I've been an early and fervent user of pi, which I think is fantastically simple and beautiful software. I have felt it needs an environment for it to work across platforms with fully functional composability for teams. This is very much a work in progress, but for my team this has been a much needed solution and has helped us tremendously. I hope you will give it a try and let me know how you would like it to improve.
2026-09-05
rivet-dev/rivet-durable-streams
B
A native implementation of the Durable Streams protocol for Rivet Actors
2026-09-04
Victor-Kipruto-Rop/knbs-cbk-pipeline
B
Ingests KNBS and CBK public indicators, standardizes and transforms them with dbt, stores marts in PostgreSQL, and exposes query + CSV APIs with signed cursor pagination, ETag caching (Redis), and rate limiting.
2026-10-14
Dmaryqsotterman/VyManager
C
Multi-tenant network management platform to configure, deploy, and monitor VyOS instances across multiple sites.
2026-10-03
git-carrier/git-carrier
B
Git extensions for parking, sharing, and landing merges that stopped at conflicts.
2026-10-02
jaqubowsky/fleet
B
Runs Claude Code and pi agents in parallel on your Mac, one Docker sandbox per issue. A host agent hands out the work, watches every sandbox and brings back tested, reviewed pull requests.
2026-09-17
Marcos66236/github-stars-history
C
Track and visualize the stars history of any GitHub repository. Open-source growth analytics and velocity tracking.
2026-09-07
evangelosvlachos96-dotcom/microservices-tracing-kafka-opentelemetry
C
Distributed microservices architecture with OpenTelemetry tracing, Kafka messaging, and auto/manual instrumentation, visualized in Uptrace.
2026-09-04
shanmukhasaireddy13/Go-Live
B
Instant, Globally-Distributed Anycast Subdomains for Developers (*.go-live.me) — 1-Click Vercel Deploy & Auto TLS 1.3
2026-10-21
syhunt/php2shell-protection
B
Emergency Apache mitigation and testing toolkit for php2shell (CVE-2026-109618 / CVE-2026-109619), featuring multipart POST blocking, request-size limits, and additional hardening measures.
2026-10-02
sjespersen/homelab-agent
B
Turn a €70 used mini PC into an always-on AI agent server: Hermes, n8n, Pi-hole, monitoring, Tailscale and encrypted backups, all as code.
2026-09-14
BitsFlowCloud/DengShell
B
A Chinese SSH desktop workbench integrating multi-session terminals, SFTP file management, server monitoring, command history and personalized settings.
2026-10-29
free-dam-man/wispbyte-xray-ws-skill
B
Wispbyte / Velixir / Pterodactyl Node · VLESS+WS plaintext (runtime Xray download, MIT, reproducible)
2026-10-28
erdemsoftware/portly
B
Fast, portable, open-source local web development environment for Windows (Apache/Nginx, PHP, MySQL/MariaDB, Node.js...)
2026-10-23
Anton-Barinov/php2shell-patches
B
php2shell (CVE-2026-109618/CVE-2026-109619) emergency patches for old PHP 5.6/7.x/8.0/8.1 — official + community backports, enhanced universal patch keeping file uploads & progress bars. For OpenCart, WordPress, HestiaCP/VestaCP legacy servers. EOL PHP RCE fix.
2026-10-23
free-dam-man/gcp-free-vm-skill
B
A guided automated activation skill pack for GCP Always Free e2-micro (just log in + bind a card)
2026-09-17
abdo-host/frappe_config_pack
B
Portable, safe, versioned configuration packages for Frappe Framework.
2026-10-22
Show HN: Uberblok – an interactive museum of ZFS internals
C
I've worked for a long time in the storage field during my career and ZFS is the piece of engineering I admire most in that space. I wanted a way to pay homage to it and to explore and better understand its internals. So I built Uberblok: a museum of ZFS. A deep dive into copy-on-write, txgs, vdevs, RAID-Z, snapshots, the ARC, metaslabs, the ZIL, send/receive with explanations and animated diagrams. I'm sure people here know these internals better than I do, so corrections are very welcome. I built it with my agent swarm organization, Algotitan. I hope you'll enjoy the deep dive into Uberblok as much as I do. Museum: https://uberblok.storagebits.workers.dev Repo: https://github.com/algotitanhq/uberblok
2026-10-16
skibid991/httpresponder.com
B
Free HTTP request and response testing API. Decode base64 from a URL, echo requests, return custom status codes and headers, test redirects and streams.
2026-10-01
luka0x73/vmxodus
B
Migrate VMware VMs to Proxmox VE with minimal downtime via a shared NFS share, no disk copy
2026-09-11
hiteshchoudhary/justPostgres
B
A lightweight postgres hub to run multiple postgres database from a single machine
2026-08-27
KSM-Team/KSM-DNS
B
KSM-DNS is an aggregated domain resolution management program supporting various providers, written in Go+Gin
2026-10-23
agentshield-dev/agentshield
B
Agentshield is open source defense for Kubernetes and AWS. It learns how your workloads really talk, flags lateral movement with evidence, and proposes fixes you approve.
2026-10-15
tinyhumansai/openscion
B
OpenScion is an open-source, server-centric source control system for very large monorepos where most clients are AI agents and CI jobs rather than people on laptops. Based on Anthropic's Scion
2026-09-27
sagochiko/aws-drawio-diagram-skill
B
A Claude Code Skill that draws AWS architecture diagrams in draw.io format
2026-09-17
zidnyzd/uptime-pulse
B
Ultra-lightweight self-hosted uptime monitoring system in pure Rust (Axum, Tokio, SQLite WAL, Rustls). Fast, low memory, and multi-arch ARM64/AMD64 ready.
2026-09-29
ProbiusOfficial/NexTerm
C
All-in-one dev and ops terminal — SSH · WinRM · files · Docker · databases · AI, all in one window
2026-09-28
Slaker19/webkvm
C
Self-hosted web panel to manage a Linux virtualization host (KVM/QEMU & Incus)
2026-08-27
Buzzso/dsh-sev
C
Remote DSH host management for DeepSeek Harness — run a headless dsh on your own server, operate it from the local GUI (SSH tunnels, mixed session list, auto-heal).
2026-10-26
joelhooks/alchemy-tailscale
C
Tailscale resources for Alchemy: policy file, auth keys, device tags, DNS
2026-10-23
BastionPHP/Bastion
C
Evidence-based PHP security assessment: patch verification, intrusion tracing, and offline reports.
2026-10-23
Qsnh/php2shell-fixed
C
PHP2Shell (CVE-2026-109618 / CVE-2026-109619) fix packages for end-of-life PHP versions (5.4 – 8.1) on BT Panel. The repo contains patched source packages and scripts that compile, replace, and roll back in one step.
2026-10-03
LTZY-ACU/LTZY-API
C
LTZY-API · Self-hosted LLM gateway & OpenAI-compatible API gateway: unified access to your own model channels, smart routing, precise billing, quotas and groups, admin backend; downstream OpenAI / Anthropic / Gemini three protocols, upstream 80 channel types, single binary with zero CGO.
2026-10-02
Minh141120/awesome-homelab
C
Your homelab, as a Git repository: free tools, real configs, and guides for self-hosting with GitOps.
2026-09-29
devilcoolyue/agentbox
C
Self-hosted browser workspace for Claude Code and Codex CLI, with Docker sessions, terminal, files, Git, and usage tracking.
2026-10-23
vperetti/php-cve-2026-109618-109619-backports
C
Minimal source backports of the PHP core RCE fixes (CVE-2026-109618 / CVE-2026-109619) for EOL PHP 5.4 and 7.3
2026-10-12
xiaomoBoy/pi-durable-edge
C
Cloudflare edition of Pi Durable Assistant: a persistent personal Agent based on Workers + Durable Objects, one-click deploy, no server needed (experimental)
2026-09-25
seekskyworld/openapp
C
Open-source control plane for turning existing single-user web apps into independent multi-user workspaces through versioned Adapters.
2026-09-18
panelalpha/panelalpha-engine
C
The easiest way to self-host projects on your own server. Connect your AI agent and let it deploy, maintain and manage multiple projects on any stack, while keeping your server organized and under control. Easy for anyone, not just sysadmins.
2026-08-27
LuxorLabs/jardinero
C
Tends your codebase while you're away. An always-on AI engineer that reviews your logs, implements your tickets and keeps your pull requests moving, each in a disposable sandbox.
2026-10-27
codician-team/diffinery
C
Open-source, agent-first GitHub and GitHub Actions alternative that runs on your own Cloudflare account: git hosting, pull requests, code review and drop-in GitHub Actions YAML on Workers, Durable Objects, R2 and Containers.
2026-09-29
upgundecha/awesome-cloud-emulators
C
A curated list of cloud emulators and local cloud development tools for AWS, Azure, and Google Cloud. Explore LocalStack, Moto, Azurite, Firebase, and more for integration testing and CI/CD.
2026-09-21
mitkox/esf
C
Self-hosted engineering software factory: Temporal, CubeSandbox agents, deterministic verification and durable evidence. MIT-licensed Machinist fork.
2026-08-27
a2w-A/mikrotik-toolkit
C
Production-grade RouterOS v7 network automation, live security audit, encrypted backup manager & WireGuard monitor.
2026-08-24
MNSH-Nexo/telegram-webproxy-installer
C
One-click multi-instance Telegram web proxy installer (MTProxy + Caddy) for Debian/Ubuntu servers.
2026-08-24
RTHeLL/tg-web-proxy
C
Telegram WEB proxy deployment: Docker stack, site catalog, and docs (based on telegramdesktop/tproxy-server)
2026-10-23
Qbix/proxy
C
Simple web server proxy to protect PHP code bases from known vulnerabilities.
2026-09-27
PinoyFreeCoder/deployment-checklist
C
Language-agnostic pre-deployment checklist for web & mobile apps — security-heavy, with human and AI-agent versions.
2026-08-27
antifailure/antifailure
C
Disposable copies of your production stack for every pull request: masked Postgres branches, sandboxed third-party APIs, AI agents that run real user flows, and load replay.
2026-10-28
pierpont-morgan/gcp-free-vps-skill
C
A verified end-to-end GCP Always Free VPS deployment skill: first claim the $300 trial credit and $10 monthly allowance, then create a free e2-micro instance, budget alerts, CDN egress blocking, traffic rate limiting only, Debian mirror swap, dae egress
2026-10-17
tetriz-ai/tetriz-harness
C
Recommend AI coding harness changes from repository context and coding signals, then distribute approved rules, skills, hooks and agents to selected people or teams. Pair with Agent Desk through your ingestion adapter; use audience targeting for manual test/control rollouts.
2026-10-11
AmyraxVPN-Main/Amyrax-Panel
C
Multi-protocol VPN panel with user management, traffic quotas, smart subscriptions, and a modern Persian interface.
2026-10-06
bruhismyname/tailscale-reverse-tunnel
C
One bash script to SSH into any headless VPS or AI sandbox - reverse Tailscale tunnel plus public Pinggy fallback, with a self-healing daemon, cron guard, and auto-restored SSH server muse.ai.
2026-10-04
TrainWithShubham/tws-labs
C
Hands-on DevOps, Cloud and AI labs in a real Linux terminal, graded on real machine state. Run locally with one command.
2026-10-01
kyroco/vitalaize
C
A wall screen for Claude Code and Codex sessions and your GitHub builds
2026-09-30
MiaAI-Lab/Qwen3.8-Flash-Next-Single-DGX-Spark-TensorFold
D
Qwen3.8 Flash Next on one DGX Spark (TensorFold)
2026-09-30
merill/intune-docs-mirror
C
Intune and Autopilot docs mirrored from Microsoft Learn, one commit per change
2026-09-14
STEALTHNET-APP/STEALTHNET-SOFTWARE
C
Self-hosted VPN service platform · Rust · PostgreSQL · Control panel, customer website and Telegram Mini App · RU/EN
2026-09-10
hsj576/virtual-ai-infra-team
C
An open-source virtual AI Infra team that discovers, benchmarks, and safely upgrades local LLM inference—with independent quality gates, a stable OpenAI-compatible API, and automatic rollback.
2026-10-26
ImLunaHey/local-paas
C
Experimental self-hosted application platform built with Rust and React. Deploy immutable OCI images with isolated builds, multi-node scheduling, secrets, logs, and metrics.
2026-09-20
needtobreathe/AuditHook
C
High-throughput HTTP event ingestion gateway with live SSE telemetry, payload auditing, and localhost dispatch capabilities.
2026-09-16
aligeek-tech/harbor-db
C
A desktop workspace for PostgreSQL, MariaDB, and Redis. Native installers for Linux, macOS, and Windows.
2026-09-10
fossaryhq/catalog
C
Public catalog of self-hosted applications with reviewed Docker Compose recipes
2026-09-08
liuhuig/Sing-box-Argo-Python
C
Since you're here, leave a Star! This project is a lightweight VMess-WS + Argo tunnel proxy node hosting service built for **100M-limited low-memory containers** (such as Pella).
2026-10-23
Jamalofski/php-eol-security
C
Unofficial Windows builds of end-of-life PHP versions (7.4, 8.0, 8.1) with security fixes, made with the official PHP Windows builder
2026-10-10
emircesur/CRAFTSPACE
C
Independent installer and update manager for the open-source ArtCraft creative applications.
2026-09-30
LindseyZ1205/video-processing-pipeline
C
Spring Boot service that transcribes uploads asynchronously: S3 presigned upload → S3 event → SQS → idempotent worker with DynamoDB leases, retries and a DLQ. Tested against LocalStack with Testcontainers.
2026-09-14
frank-vpl/mtproto-inataller
C
A simple, interactive Bash installer that sets up an MTProto FakeTLS proxy for Telegram on Ubuntu/Debian servers.
2026-08-27
kareemessam09/Openship-App
C
Unofficial KMP client for Openship (self-hostable deploy platform)
2026-10-15
kungec/kunpanel
C
KunPanel 坤面板 — a lightweight single-binary server operations management panel in Go (website/app store/Docker/WAF/monitoring/terminal), supporting all Linux systems and one-click Windows installation. Single-binary server management panel in Go.