Collection · 51 entries
DevOps and infrastructure tools
CLIs, port-forwarders, backup wrappers, and templating tools for the boring-but-load-bearing parts of running infrastructure.
The DevOps cluster here is intentionally narrow: tools that sit between you and a system you don't fully control. ytt for structural YAML templating, kftray for kubectl port-forwards, autorestic as a config-driven restic wrapper, cup for Docker image update checks, runs-on for self-hosted runners. Each one replaces a workflow that was previously brittle bash.
park - pause a process and free its TCP port
Go CLI that suspends a running process and releases its TCP port, then resumes it later with the same PID and memory intact. Ctrl+Z for long-running servers.
dcm - DockerComposeMaker for self-hosters
Self-hostable web UI for picking and assembling docker-compose.yml files for home servers. Shareable configs and a discovery feed for new containers.
lfk - vim-style Kubernetes TUI
Yazi-inspired, vim-keybinding Kubernetes TUI with multi-cluster tabs, RBAC preview, CRD discovery, and integrations for ArgoCD, Helm, FluxCD, Kyverno, Trivy, and Falco. Aims at fast keyboard-only navigation.
artifact-keeper - open-source artifact registry
Drop-in Artifactory and Nexus alternative that supports 40+ package formats, security scanning, WASM plugins, and edge replication. Self-hostable in Rust.
cloudlist - cloud asset inventory CLI
ProjectDiscovery CLI that lists assets across multiple cloud providers from one config. Useful as a recon and inventory step in security workflows.
pinact - pin GitHub Actions to commit SHAs
CLI that edits GitHub workflow and composite action files to pin every action and reusable workflow to a commit SHA, with version annotations and update support. Plugs the supply-chain hole left by tag-only references.
pgschema - declarative Postgres schema CLI
Terraform-style declarative schema migration tool for Postgres with multi-tenant support and an explicitly agent-friendly interface. Lets agents propose and apply schema diffs without hand-rolling migrations.
slowql - offline SQL static analyzer with 272 rules
Static SQL analyzer for performance, security, compliance, and cost with 272 built-in rules. Runs entirely offline in CI pipelines, no database connection needed.
multi-gitter - apply changes across many repos
Go CLI to run a script across hundreds of repositories and open PRs from the diffs. The classic tool for org-wide refactors and dependency bumps.
e1s - k9s for AWS ECS
Terminal UI for managing AWS ECS clusters, services, and tasks. Brings the k9s ergonomic to Fargate workloads with ecs-exec built in.
nanocl - container and VM orchestration
Rust distributed system that orchestrates both containers and virtual machines under one daemon, with built-in DNS and reverse proxy. Aims at homelab and small-cluster deploys without Kubernetes.
ProxCenter - vCenter alternative for Proxmox
Web UI to manage multiple Proxmox VE clusters and Proxmox Backup Server instances from a single pane. Open alternative to VMware vCenter.
PingMe - unified CLI for cross-platform alerts
Go CLI and small web service to send notifications across Discord, Slack, Telegram, Mastodon, email, Gotify, and more from one config. Useful for CI hooks and shell scripts.
KubeVPN - cloud-native dev env tunnel into k8s
Connects your local dev machine to a Kubernetes cluster network so services, DNS, and workloads resolve as if you were inside the cluster. Built on envoy.
ec2-github-runner - on-demand self-hosted CI on EC2
GitHub Action that spins up an ephemeral EC2 instance as a self-hosted runner for a single job, then tears it down. Cheap heavy-CI without the standing fleet.
Atmos - Terraform orchestration with DRY config
Go CLI that keeps Terraform and Helmfile environment configs DRY via hierarchical imports and inheritance. Targets multi-account, multi-region orgs.
aws-nuke - delete every resource in an AWS account
Go CLI that recursively removes every resource in an AWS account. For sandbox cleanup and decommissioning - has guard rails to prevent prod accidents.
Holos - compose-style YAML for QEMU/KVM
Single-host VM runtime that replaces libvirt XML and Vagrant Ruby with compose-style YAML. First-class GPU passthrough, healthchecks, cloud-init, and VM-to-VM L2 sockets.
lazytilt - TUI for Tilt.dev
Lazy-style terminal UI for Tilt, the local Kubernetes dev tool. Stay in the shell instead of switching to Tilt's web UI.
cronboard - terminal dashboard for cron jobs
Python TUI built with Textual for managing cron jobs locally and over SSH. Surfaces schedules, last-run status, and crontab edits without leaving the terminal.
aqua - declarative CLI version manager
Go version manager that pins CLI tool versions per repo via a registry, supports lazy install, and integrates with Renovate for continuous updates. Like asdf with declarative config.
kubecolor - colorize kubectl output
Drop-in wrapper that adds syntax-aware coloring to kubectl output. Most useful when reading get/describe at a glance during incidents.
kubecm - manage multiple kubeconfigs
Go CLI that merges, switches, and edits kubeconfig files across many clusters. Solves the daily pain of one mega kubeconfig vs many separate files.
JReleaser - release automation across many ecosystems
Java-based release tool that builds, signs, and publishes binaries to GitHub, GitLab, Maven, Homebrew, Scoop, Snap, and others from one config.
kapp - simple Kubernetes app deployment
Carvel's deployment CLI that treats a labeled set of Kubernetes resources as one app. Diffs, applies, and waits with clear convergence semantics.
OpenRun - declarative internal tools deployment
Go application server for deploying web apps and internal tools to a single node or Kubernetes via declarative config. Targets the Heroku-class deploy UX.
Shelve - secret and env management with GitHub sync
Open-source env/secret manager with a CLI and GitHub sync. Collaborative team UI for variables that usually live in scattered .env files.
peekaping - open-source Uptime Kuma alternative
Self-hosted uptime and telemetry monitor written in Go. Lightweight alternative to Uptime Kuma with a focus on minimal resource use.
nps - intranet tunneling and reverse proxy
Go reverse proxy and intranet penetration tool with a Web UI for tunneling HTTP, TCP, UDP, and SOCKS5 traffic. Enhanced fork with NAT traversal and admin dashboard.
ducker - k9s-style Docker TUI
Rust terminal UI for managing Docker containers, modeled after k9s. Built on ratatui for keyboard-driven container, image, and log inspection.
temps - self-hosted Vercel-style PaaS
Rust deploy platform with CI/CD, error tracking, and analytics built in. Aimed at homelabs and teams that want Heroku-class deploy UX without the bill.
miniblue - local Azure dev emulator
Single Go binary that emulates 25+ Azure services for local development and CI. No Azure account or Docker stack needed - run integration tests offline.
rospo - persistent SSH tunnels with embedded server
Go single binary for persistent SSH reverse tunnels with an embedded SSH server. Reconnects automatically and exposes services without any cloud middleman.
kumo - lightweight AWS service emulator
Go AWS emulator alternative to LocalStack with a focus on a small binary and fast CI cold starts. Targets the most-used services for local dev and integration tests.
ComposeFlux - GitOps for Docker Compose
Lightweight GitOps deployment tool that watches a repo and applies Docker Compose changes to a host. Brings ArgoCD-style sync to single-VM setups.
kubewall - single-binary Kubernetes dashboard
Single-binary Kubernetes dashboard with multi-cluster management and built-in AI integration across OpenAI, Claude, Gemini, Ollama, and others. Go backend, no install fluff.
compose-for-agents - Docker Compose recipes for agents
Docker's collection of ready-to-use Compose stacks for orchestrating open-source LLMs, tools, and agent runtimes. Useful starting points for self-hosted setups.
n8n-install - one-command self-hosted AI automation
Shell installer that deploys n8n, Ollama, Flowise, Supabase, RAG stack, and 30+ tools behind auto-HTTPS. Self-hosted Zapier or Make alternative.
mcp-nixos - MCP server for NixOS resources
Model Context Protocol server that exposes NixOS packages, options, and Home Manager resources to agents. Useful for Nix-heavy dev environments.
envradar - find drifting and unused env vars
CLI that scans a repo for undocumented, unused, and drifting environment variables across .env files, code, and deploy configs. Surfaces variables defined but never read, and vice versa.
kmcp - Kubernetes controller for MCP servers
Go CLI plus Kubernetes operator that builds, tests, and deploys MCP servers as native k8s workloads. Wraps server lifecycle in standard kubectl-style flows.
borg-ui - web UI for Borg Backup
Replaces verbose Borg Backup terminal commands with a web UI for creating, scheduling, and restoring backups. Python self-hosted alternative to Vorta for headless servers.
Prometheus MCP server
MCP server that lets agents query and analyze Prometheus metrics through a standardized tool interface. Useful for ops-aware coding agents.
ytt - structural YAML templating
Carvel's templating tool that operates on YAML data structures instead of text. Eliminates the indentation-and-quotes pain of Helm-style string templating.
Nixopus - autonomous cloud for builders
Open-source PaaS that handles deploys, env management, databases, and rollbacks across your own VPS fleet. Heroku-class UX without the Heroku price.
Zane Ops - self-hosted PaaS
Beautiful self-hosted control plane for deploying web apps, static sites, and databases on your own infra. Render/Railway feel without the lock-in.
cup - Docker container update checker
Tiny Rust CLI plus React UI that scans your running containers and tells you which images have updates available. Zero-config, no agent on the host.
runs-on - self-hosted GitHub Actions runners on AWS
CloudFormation-based runner controller. Reportedly 10x cheaper than GitHub-hosted runners with 40% faster builds and unlimited cache.
kftray - kubectl port-forward manager
Tray app for managing kubectl port-forwards plus an ngrok-like reverse tunnel for exposing local services with TLS, traffic inspection, and multi-hop proxies.
autorestic - config-driven backup wrapper for restic
YAML-driven CLI that schedules, runs, and prunes restic backups across multiple locations. The friendly face restic always needed.
murex - smarter shell with a real type system
POSIX-friendly Go shell that knows about JSON, CSV, TOML, and YAML natively. Pipe structured data without `jq` gymnastics.
Related collections
Self-hosted developer tools and PaaS
Open-source, self-hosted alternatives to Heroku, Render, GitHub Actions, and the rest of the SaaS dev stack.
Go CLI tools for developers and operators
Single-binary Go CLIs and TUIs across observability, git, shells, and DevOps - the tools that make Go the practical default for distribution-friendly CLIs.