HTTP-accessible sandboxed Linux terminal by the Open WebUI team. Curl commands to execute them, built-in multi-user isolation, Docker-ready. MIT license, 2.9k stars.
Self-hosted AI gateway routing across 268 providers with auto-fallback, token compression (RTK+Caveman), built-in MCP server, and cloud agent support. 33k+ stars, MIT license.
Self-hosted AI router with 3-tier auto-fallback (subscription → cheap → free) across 60+ providers. RTK+Caveman token compression saves 20-65%. One OpenAI-compatible endpoint for all CLI tools. MIT license.
Open-source collaborative platform by Block, Inc. (formerly Square) — a shared workspace where humans, AI agents, workflows, Git events, and project memory coexist. Built with Rust, TypeScript, and Dart. 12.8k stars, Apache 2.0.
Lightweight self-hosted notes app with a clean card-based UI similar to Google Keep. Features local-first sync (LWW CRDTs), offline support via IndexedDB, dark mode, note sharing with email notifications, OAuth/SSO auth (Authentik, Keycloak), and note search. Built with SvelteKit 2 (Svelte 5 runes), TypeScript, Tailwind CSS 4, SQLite + Drizzle ORM. Docker-ready, 51 stars, MIT.
Self-hosted karaoke app that uses neural networks (Demucs for vocal isolation, Whisper for lyrics alignment) to create karaoke tracks from any song in your music library. Real-time pitch scoring and a polished UI. Built with Rust (Tauri desktop app), React/TypeScript web client, Python ML pipeline. Self-hosted web version available, Docker support. 1.3k stars, GPL-3.0.
Step-by-step guide to hardening Plex privacy: opt out of marketing emails, disable sale of personal data to ad partners, stop targeted advertising, turn off playback data collection, hide watch state/ratings sync, disable online media sources, and manage friend visibility. Covers every privacy-related toggle in Plex’s account settings with direct links. By Ethan Sholly on selfh.st, updated March 2025.
Self-hosted end-to-end encrypted file storage designed for local hardware. All encryption (AES-256-GCM) is client-side — file contents, names, and directory topology are encrypted before upload. Uses a Merkle tree for obfuscated directory structure, hash sharding for blob storage, and concurrent multi-device sync with race condition handling. Vanilla JS WebUI, Python/FastAPI backend, Docker Compose ready. BSL license, 2 stars.