systemd

Valkeyvalkey-io/valkey

A high-performance, open-source distributed key-value database optimized for caching and real-time workloads.

fail2banfail2ban/fail2ban

A daemon that scans log files and bans IP addresses with too many failed authentication attempts using firewall rules.

Whooglebenbusby/whoogle-search

A self-hosted, ad-free, privacy-respecting metasearch engine that proxies Google search results.

Rocketcoreos/rkt

A pod-native container engine for Linux designed to be secure, composable, and standards-based.

App Container basicscoreos/rkt

A pod-native container engine for Linux designed to be secure, composable, and standards-based.

youkiyouki-dev/youki

A container runtime written in Rust that implements the OCI runtime specification, designed for performance and memory efficiency.

youkicontainers/youki

A container runtime written in Rust that implements the OCI runtime specification, designed for performance and memory efficiency.

MTProxyTelegramMessenger/MTProxy

A simple MTProto proxy server that enables Telegram access in censored regions.

Backrestgarethgeorge/backrest

A web UI and orchestrator for restic backup, providing scheduled backups, snapshot management, and file restoration.

LACTilya-zlobintsev/LACT

A Linux tool for monitoring and configuring AMD, Nvidia, and Intel GPUs, including overclocking, fan control, and power management.

Photonvmware/photon

A minimal Linux container host optimized for VMware infrastructure and cloud-native applications.

microvmmicrovm-nix/microvm.nix

A Nix Flake to build and run NixOS on multiple Type-2 hypervisors, providing isolated virtual machines as Nix packages or systemd services.

amazon-ecs-agentaws/amazon-ecs-agent

The Amazon ECS Container Agent manages containers on EC2 instances for Amazon Elastic Container Service.

µStreamerpikvm/ustreamer

A lightweight, fast MJPEG-HTTP video streamer for V4L2 devices, optimized for high-resolution, high-FPS streaming.

hblockhectorm/hblock

A POSIX-compliant shell script that blocks ads, tracking, and malware domains by generating a hosts file.

Clevislatchset/clevis

A pluggable framework for automated decryption of data and unlocking of LUKS volumes using pins like Tang, TPM2, and PKCS#11.

OwnTracks Recorderowntracks/recorder

A lightweight program for storing and accessing location data published by OwnTracks apps via MQTT or HTTP.

hyprwhsprgoodroot/hyprwhspr

A fast, accurate, and private native speech-to-text tool for Linux, offering system-wide dictation with local or cloud backends.

meta-balenabalena-os/meta-balena

A collection of Yocto layers for building balenaOS, a Linux-based operating system optimized for IoT devices and containers.

cominnlewo/comin

A pull-mode GitOps deployment tool for NixOS (and nix-darwin) machines that polls Git repositories to apply configurations.

Cloverryanrudolfoba/SteamDeck-Clover-dualboot

An easy-to-use script to install Clover, a graphical boot manager for dual-booting SteamOS/Bazzite and Windows on Steam Deck and Lenovo Legion Go devices.

Tanglatchset/tang

A stateless server for binding data decryption to network presence using asymmetric cryptography, providing a secure alternative to key escrow.

Yin-Yangdaehruoydeef/Yin-Yang

Automatically switches themes between light and dark modes for Linux desktops and applications based on time or sunrise/sunset.

ssh-honeypotdroberson/ssh-honeypot

A low-interaction SSH honeypot that logs attacker IPs, usernames, and passwords for security intelligence.

Mi Flora via MQTT daemonThomDietrich/miflora-mqtt-daemon

A Linux daemon that collects data from Xiaomi Mi Flora plant sensors via Bluetooth and publishes it to an MQTT broker for smart home integration.

nix-bitcoinfort-nix/nix-bitcoin

A collection of Nix packages and NixOS modules for securely deploying full-featured Bitcoin and Lightning nodes.

PostgreSQL Metricsspotify/postgresql-metrics

A CLI tool that extracts PostgreSQL database and cluster metrics, outputting them as JSON or sending them via UDP.

USB Keystroke Injection Protectiongoogle/ukip

A Linux daemon that detects and blocks USB keystroke injection attacks through monitoring and device ejection.

coimensfeld/code-on-incus

A security-hardened container runtime for AI coding agents using Incus system containers with real-time threat detection and credential isolation.

AES67 Linux Daemonbondagit/aes67-linux-daemon

A Linux daemon implementing the AES67 standard for real-time audio over IP with a configuration WebUI.

Husarnet VPNhusarnet/husarnet

A peer-to-peer VPN that connects laptops, servers, and microcontrollers over the internet with zero configuration.

pg_exporterVonng/pg_exporter

Advanced PostgreSQL and PgBouncer metrics exporter for Prometheus with declarative configuration and 600+ metrics.

firewalld-restprashantgupta24/firewalld-rest

A REST API to proactively manage SSH access by dynamically adding/removing IP addresses in firewalld rules.

bentorapenne-s/bento

A KISS deployment tool for managing NixOS fleets (servers & workstations) using a pull-based model.

extra-containererikarvstedt/extra-container

Manage declarative NixOS containers without full system rebuilds, combining declarative options with imperative speed.

ansible-relayornusenu/ansible-relayor

An Ansible role that automates the deployment and management of Tor relays with security features like offline master keys and Prometheus monitoring.