Opensource by Reddit – Telegram
Opensource by Reddit
20 subscribers
5 photos
2 videos
9.57K links
Reddit's ♨️ take on Open Source Technology.

Join the discussion ➡️ @opensource_chats

Channel Inquiries ➡️ @group_contacts_bot

👄 TIPS ➡️➡️➡️ https://news.1rj.ru/str/addlist/mB9fRZOHTUk5ZjZk

🌈 made possible by
@reddit2telegram
@r_channels
Download Telegram
Browser automation using recorded user sessions

Hey Everyone! I created a tool that can record user sessions on a website and will convert them into playwright browser actions. The initial idea was to use this for QA, but I thought maybe this could be helpful for other browser automation use cases as well. Here's how it works:

1. Developer can add our js snippet to their html
2. It records clicks, fills and selects. This can be extended to more actions
3. User can generate automation workflows by leveraging the user sessions recorded and use AI to determine how to complete a task

Here's a video of how it works and my website. If people are interested, I can open-source the recorder -> playwright automation!

https://www.loom.com/share/caa295aa921f4e71bb10e0448838a404?sid=ce02e0d5-61b7-4ba9-b635-8bc5bbdcc70c

https://redd.it/1nqnldl
@r_opensource
I rewrote Minecraft Pre-Classic versions in plain C

Hey folks, I’ve just finished working on a project to rewrite Minecraft pre-classic versions in plain C

Rendering: OpenGL (GL2 fixed pipeline)
Input/Window: GLFW + GLEW
Assets: original pre-classic resources
No C++/Java — everything is straight C (with some zlib for save files).

Repo here if you want to check it out or play around:
github.com/degradka/mc-preclassic-c

https://redd.it/1nqpc9l
@r_opensource
An opensource math competition website (still a WIP, but has functionality)

Hello,

I hope this is an OK place to post this: I am working on an opensource math competition site. It is called https://conjecscore.org/ and it currently only has 1 problem. But even though there is only one problem, the problem does not have a known solution. It's an open math problem. Instead of having a known solution it has a "score" function that determines how "close" you are to solving the problem (informally). It still has a lot of rough edges but I was wondering if people were frankly even interested in the idea. If so, I could try finding more open problems and give them a score function too. Additionally, I could continue polishing the site too. Lastly, and most importantly, the source code is here: https://github.com/thyrgle/conjecscore

Thank you for your time.

https://redd.it/1nqowou
@r_opensource
Thinking about open sourcing our POS system - looking for advice

Hey r/opensource!

I've grown up on open source and use it daily. Now I'm considering open sourcing **Biyo POS (https://biyopos.com)** \- our all-in-one point of sale system for restaurants/retail.

We currently serve hundreds of businesses with features like offline transactions, inventory management, online ordering, and multi-payment support list goes on..

**Why we're excited:** There's a real gap for a solid open source POS. Small businesses are stuck with expensive proprietary solutions or piecing together multiple tools. We actually provide it pretty much free if business process their payments for us - but, we want to grow more and provide more value especially as someone who came up in the retail industry.

**What we need advice on:**

* Anyone open sourced a commercial product before? Biggest wins/challenges?
* Best licensing approach for business software?
* How to balance community contributions with quality/security?
* Sustaining development while keeping it truly open?
* Should we release everything at once or start with core components?

We want to build a real community around this, not just dump code and run.

**Are we crazy or is there potential here?**

Thanks for any insights!

https://redd.it/1nqnyox
@r_opensource
The shadcn for AI Agents - A CLI tool that provides a collection of reusable, framework-native AI agent components

I had a idea of The shadcn for AI Agents - A CLI tool that provides a collection of reusable, framework-native AI agent components with the same developer experience as shadcn/ui.


I started coding it but eventually I had to vibe code now it's out of my control to debug if you could help it will mean a lot


https://github.com/Aryan-Bagale/shadcn-agents

https://redd.it/1nqvhwr
@r_opensource
Open source in today’s world is mind boggling

I couldn’t and still can’t wrap my head around the fact that a person, with proper skills, would make something that would have a paid alternative or worked hard but instead of selling it or having a subnoscription, placed it on the internet, completely free or not, but allowing users to basically see it, use it, build it.

Someone putting their mind on the internet believing in the community and expecting nothing monetary back but rather to improve their product and see it go and some even pay out of pocket for that thing to keep running, is just crazy.

I understand not everything open source is free, but having it open source allows others to potentially use it for free or your property to be the community’s instead of yours alone, like blender and gimp and libreoffice who give a completely working and valid alternative to the multi million or maybe billion dollar companies’ products, or things like ublockorigin which could have easily been made with subnoscriptions like a lot of thing before it, or the millions of projects out there left in hopes to help the community in some way.

I’ve always had an aim, to build my experience to the point where I could contribute, because this is where I’d feel fulfilled enough to know I can help, but I just keep wondering, if you get nothing directly in return, why would you personally put your project, hard work and potential money machine to open source?

https://redd.it/1nqwiog
@r_opensource
CloudForge: Open-Source Jenkins on AWS CDK (Java) - Deploy Production-Ready CI/CD in Minutes

Hey r/opensource! I'm excited to share **CloudForge** - an open-source project that makes deploying production-ready Jenkins on AWS incredibly simple using AWS CDK for Java.

## ☁️ What is CloudForge?

CloudForge is a comprehensive framework for deploying Jenkins CI/CD infrastructure on AWS. It provides:

- **🏗️ Infrastructure as Code**: Built on AWS CDK v2 with Java
- ** Multiple Deployment Options**: EC2 or Fargate, with auto-scaling
- **🔒 Security-First**: Multiple security profiles (DEV/STAGING/PRODUCTION)
- **🌐 Domain & SSL**: Bring your own domain with automatic SSL certificates
- **📊 Production-Ready**: Load balancers, monitoring, and high availability

## 🚀 Quick Start

```bash
# Clone the core library
git clone https://github.com/CloudForgeCI/cloudforge-sample.git

# Run the interactive deployer
./deploy-interactive.sh
```

That's it! The interactive deployer guides you through configuration and deploys everything.

## Key Features

### 🎛️ **Interactive Deployer**
- Guided configuration with sensible defaults
- Multiple deployment strategies (Jenkins, S3 websites, etc.)
- Real-time CDK synthesis and deployment
- Context persistence for non-interactive deployments

### 🧩 **Modular Architecture**
- **Orchestration**: Centralized factory creation and dependency management
- **Strategy Pattern**: Easily extensible deployment types
- **Slot-Based State Management**: Prevents duplicate resource creation
- **Comprehensive Testing**: 100% success rate across all configuration combinations

### 🔒 **Security Profiles**
| Profile | SSH Access | Jenkins Access | IAM Profile | Use Case |
|---------|------------|----------------|-------------|----------|
| **DEV** | `0.0.0.0/0` | `0.0.0.0/0` | `EXTENDED` | Development |
| **STAGING** | VPC only | ALB only | `STANDARD` | Testing |
| **PRODUCTION** | Bastion/VPN | ALB only | `MINIMAL` | Production |

### 🌐 **Domain & SSL Support**
- Automatic Route53 DNS record creation
- ACM SSL certificate provisioning
- Custom domain and subdomain support
- HTTP to HTTPS redirects

## 📁 Project Structure

cfc-core/ # Core library
├── cloudforge-api/ # Configuration models & interfaces
├── cloudforge-core/ # CDK constructs & business logic
└── cfc-testing/ # Testing framework & interactive deployer

cloudforge-sample/ # Sample application
├── JenkinsFargateStack.java
├── JenkinsEc2Stack.java
└── InteractiveDeployer.java

## 🧪 Comprehensive Testing

The project includes an extensive testing framework:

- **Deploy Configuration Validation**: Maps every configuration to expected AWS resources
- **Performance Benchmarking**: Synthesis time optimization
- **Drift Detection**: Configuration change impact analysis
- **Security Hardening**: Automated security profile testing

**Test Results**: 10/10 configuration combinations pass (100% success rate)

## 🛠️ Technology Stack

- **Java 21+**: Modern Java features and performance
- **AWS CDK v2**: Infrastructure as Code
- **Maven**: Build and dependency management
- **Apache License 2.0**: Fully open source

## 🎯 Use Cases

- **Development Teams**: Quick Jenkins setup for CI/CD
- **DevOps Engineers**: Production-ready infrastructure templates
- **Learning**: AWS CDK patterns and best practices
- **Enterprise**: Foundation for custom deployment solutions

## 🆓 Free vs Enterprise

**Free Edition** (100% open source):
- EC2/Fargate deployments
- ALB with auto-scaling
- Domain/SSL support
- Multi-AZ deployments
- No restrictions on usage

**Enterprise Edition** (commercial):
- Web Application Firewall (WAF)
- Private endpoints
- Single Sign-On (SSO)
- Advanced monitoring
- Commercial support

**Special**: Veteran-owned businesses get Enterprise features **free of charge** ❤️

## ⚙️ Configuration Examples

### Basic Jenkins on Fargate
```json
{
"runtime": "FARGATE",
"topology": "JENKINS_SERVICE",
"securityProfile": "PRODUCTION",
"domain": "example.com",
"subdomain": "jenkins",
"enableSsl": true
}
```

### EC2 with Auto-Scaling
```json
{
"runtime":
"EC2",
"topology": "JENKINS_SERVICE",
"minInstanceCapacity": 2,
"maxInstanceCapacity": 10,
"cpuTargetUtilization": 75
}
```

## 📊 Performance

- **Synthesis Time**: ~2.5 seconds average
- **Deployment Time**: ~5-10 minutes (depending on resources)
- **Resource Optimization**: Minimal AWS costs with auto-scaling

## 🚀 Future Enterprise Modules

CloudForge is designed with extensibility in mind. The upcoming Enterprise modules will include:

### 🔐 **Advanced Security Suite**
- **Web Application Firewall (WAF)**: AWS WAF integration with custom rules
- **Private Endpoints**: VPC endpoints for ECR, S3, CloudWatch, and other AWS services
- **Network Segmentation**: Advanced VPC configurations with private subnets
- **Compliance Frameworks**: SOC2, HIPAA, and PCI-DSS compliance templates

### 🔐 **Identity & Access Management**
- **Single Sign-On (SSO)**: Integration with AWS SSO, Okta, Azure AD
- **ALB OIDC Integration**: Secure authentication at the load balancer level
- **Jenkins OIDC Plugin**: Native Jenkins authentication integration
- **Role-Based Access Control**: Fine-grained permissions and policies

### 📈 **Advanced Monitoring & Observability**
- **Custom CloudWatch Dashboards**: Pre-built monitoring dashboards
- **Log Aggregation**: Centralized logging with CloudWatch Logs Insights
- **Performance Metrics**: Custom metrics for Jenkins performance
- **Alerting**: SNS-based alerting for critical events
- **Distributed Tracing**: X-Ray integration for request tracing

### 💾 **Backup & Disaster Recovery**
- **Automated Backups**: EFS snapshots and Jenkins configuration backups
- **Cross-Region Replication**: Multi-region deployment capabilities
- **Point-in-Time Recovery**: Automated backup scheduling and retention
- **Disaster Recovery Plans**: Automated failover procedures

### 🔄 **CI/CD Pipeline Enhancements**
- **Pipeline as Code**: GitOps-based pipeline management
- **Multi-Environment Support**: Dev/Staging/Production pipeline orchestration
- **Artifact Management**: Advanced S3-based artifact storage and versioning
- **Build Optimization**: Parallel builds and resource optimization

### 🌐 **Multi-Cloud & Hybrid Support**
- **Azure Integration**: Azure DevOps and Azure Container Registry support
- **Google Cloud**: GCP integration for hybrid deployments
- **On-Premises**: Hybrid cloud connectivity and management
- **Kubernetes**: EKS integration for containerized workloads

### 📊 **Analytics & Reporting**
- **Build Analytics**: Comprehensive build performance and success metrics
- **Cost Optimization**: AWS Cost Explorer integration and recommendations
- **Resource Utilization**: Detailed resource usage and optimization suggestions
- **Compliance Reporting**: Automated compliance and audit reports

## 🤝 Contributing

We welcome contributions! The project has:
- Comprehensive test coverage
- Clear documentation
- Interactive development tools
- Performance benchmarking

## 🔗 Links

- **Core Library**: https://github.com/CloudForgeCI/cfc-core
- **Sample App**: https://github.com/CloudForgeCI/cloudforge-sample
- **Documentation**: See README files in each repository
- **License**: Apache 2.0

## 💡 Why I Built This

As a DevOps engineer, I was tired of manually configuring Jenkins infrastructure. CloudForge solves this by providing:

1. **Zero Configuration**: Sensible defaults for everything
2. **Production Ready**: Security, monitoring, and scalability built-in
3. **Extensible**: Easy to add new deployment types
4. **Testable**: Comprehensive validation and testing framework

## 🎉 Recent Updates

- Fixed DNS record duplication issues
- Resolved HTTP listener routing for SSL deployments
- Improved target group configuration
- Enhanced security hardening across all profiles
- Performance optimizations and logging improvements

## 🗺️ Roadmap

### Q4 2025
- [ ] Complete cloudforge-sample integration with SystemContext
- [ ] S3 + CloudFront static website deployment
- [ ] Enhanced documentation and tutorials
- [ ] Jenkins Migration Integration

### Q1 2026
- [ ] S3 + CloudFront + SES email delivery
- [ ]
Enterprise WAF module
- [ ] Private endpoints support
- [ ] Advanced monitoring dashboards

### Q2 2026
- [ ] SSO integration modules
- [ ] Backup and disaster recovery
- [ ] Multi-region deployment support
- [ ] Advanced analytics and reporting

---

**TL;DR**: CloudForge is an open-source framework that deploys production-ready Jenkins on AWS in minutes using AWS CDK for Java. It includes interactive deployment tools, comprehensive testing, and supports both EC2 and Fargate with auto-scaling, SSL, and security hardening. The Enterprise modules will provide advanced security, monitoring, and multi-cloud capabilities.

Try it out and let me know what you think! 🚀

---

*Note: The cloudforge-sample project has been updated to use the latest Orchestration Layer. The cfc-testing module works perfectly and demonstrates all functionality.*

https://redd.it/1nqxm5p
@r_opensource
We built a P2P VPN that runs over a Reticulum mesh network and made it open-source

rns-vpn-rs makes it possible to run a P2P VPN over a Reticulum mesh network.

In practice, that means:

\- You can assign private IPs to Reticulum nodes.

\- Any app that speaks plain old IP (UDP/TCP) can now run on top of Reticulum.

\- Developers can connect services (chat, servers, APIs, telemetry feeds, etc.) across a Reticulum mesh without writing Reticulum-specific code.

It behaves like a normal VPN client. Peers show up as reachable IPs, and traffic is transparently routed over the mesh.

With this, projects can start routing any IP traffic over reticulum-rs, opening the door for all kinds of real-world use cases: off-grid comms, decentralized infrastructure, resilient field networking, and more.

Repo: https://github.com/BeechatNetworkSystemsLtd/rns-vpn-rs

https://redd.it/1nqypfx
@r_opensource
Solo Developer - Concern regarding stealing of my OSS code

I am a former lead developer with experience building multiple SaaS products. I am now working on developing a new OSS tool under AGPL v3 license.

With my domain knowledge I know I can offer the community a much better solution compared to the pricey solutions offered by the established SaaS companies in the space.

My main concern is preventing the code from being stolen. How to stop a company from using my entire backend code, pasting their own frontend and then start selling it on their own as a closed source product?

Even if I could detect this, as a solo developer, I don't have the time, money, or resources for a legal battle.

So, my questions are:

1. How to detect if a company has copied my backend code?
2. What steps can I take to protect my project, considering my limited resources?

Thanks for any advice.

P.S. I had recently seen this post from Puter founder and that's why I am concerned because I have already starting building my own.

https://redd.it/1nqz786
@r_opensource
Very stoked to see the response on a personal project of mine on Github which gave me a lot of feedback that helped me develop it further.. wanted suggestion from this sub on how to make projects like these more open source / contribution friendly.. what are the best practices?
https://github.com/aniketrajnish/Unity-Collider-Optimizer

https://redd.it/1nr2dg9
@r_opensource
Open Source is a Gift, not an Obligation

Disclaimer: I am paid to write open source software by a commercial vendor. Opinions here are my own and not my employer's.

As stated in the OpenSSF Joint Letter on Sustainable Stewardship, much of our open source ecosystem relies on freely available package manager ecosystems. Operators of these package manager repositories are struggling to provide implicit commercial-grade guarantees of uptime, distribution, and security.

Unfortunately, many of these package managers do not make it easy to migrate off of the “upstream” repository. Most specify a default repository that is challenging to disable. Many also enforce immutable package versioning, making it harder for commercial redistributors to provide their own “hardened” or “patched” versions of these libraries.

The success of Linux/Docker containers has shown us these features are not necessary to have a thriving ecosystem. Though a single special repository was needed to drive adoption (Docker Hub), the specification provided easy and clear means to use alternatives. Just add a hostname!

Containers also provided immutability through content-addressability. “:tag@digest” referencing made “immutable tags” an unnecessary feature. Digest-pinning is now considered a security best practice.

Today there is no single authoritative container registry, and that is a good thing. When Docker Hub added rate limits and commercial pricing, the ecosystem quickly adapted and simultaneously improved their security posture. When developers consume commercial rebuilds of “open source” container images, there is usually no guesswork as to whether or not the commercial version was obtained. Multiple companies are now providing a free, floating “latest” tag as a viable business strategy.

Package manager ecosystems like Maven, PyPi, and npm should incorporate these lessons into their future designs. Make any “default” repositories easy to swap/change. Break promises with mutable versioning alongside content-addressable location/specification. Encourage commercial rebuilding to reduce load and incentivize upstream patching.

To quote my colleague Stephen Augustus, “Open source owes you nothing.”

https://redd.it/1nr2afx
@r_opensource
Convert browser user sessions into playwright noscripts

Hey Everyone! I created a tool that can record user sessions on a website and will convert them into playwright browser actions. The initial idea was to use this for QA, but I thought maybe this could be helpful for other browser automation use cases as well. Here's how it works:

1. Developer can add our js snippet to their html
2. It records clicks, fills and selects. This can be extended to more actions
3. User can generate automation workflows by leveraging the user sessions recorded. The actions are converted into playwright noscripts.

Here's a video of how we've used it and the open source github link

https://www.loom.com/share/caa295aa921f4e71bb10e0448838a404?sid=ce02e0d5-61b7-4ba9-b635-8bc5bbdcc70c

https://github.com/milestones95/darknore-recorder

https://redd.it/1nr6qkf
@r_opensource
I got my first star on my FOSS, omg im so happy
https://redd.it/1nrc22j
@r_opensource
Gausian splats in openstreetmaps

It would be great. I wouldn't be capable of this myself but an alternative to Google maps like this would get me to switch in a heartbeat.

https://redd.it/1nramck
@r_opensource
Open Source options needed

Exciting times! As my consulting/solution-building practice evolves, I'm considering taking on a new engagement that would require me to host a custom solution on my own AWS infrastructure, rather than the client's.
While I'm confident in the development and functional operations, I have limited resources for dedicated 24/7 infrastructure security and complex operational management. The classic trade-off between control and operational overhead!
I'm looking for recommendations for highly automated AWS security and ops solutions or managed service providers (MSSPs) that specialize in offloading this responsibility.
The ideal solution would be something that can handle:
1. Automated threat detection and incident response.
2. Continuous configuration and compliance monitoring.
3. Proactive patching and vulnerability management.
Essentially, a way to ensure robust security and ops without needing a full-time, in-house security team from day one.
Any suggestions on open source alternatives to AWS services (like Security Hub or GuardDuty with automation), specific 3rd-party tools, or managed service partners you've had a great experience with would be much appreciated!
#AWS #CloudSecurity #DevOps #ManagedServices #Automation #TechConsulting #CloudOps

https://redd.it/1nrhdsm
@r_opensource
I have built an open-source application that can generate large image datasets from just a few samples, including annotations, labeling, geometric variations, visual effects, background and texture changes, as well as noise. https://github.com/ragulnathMB/GENxCRY

I’ve built an **open-source application** that can generate **large-scale image datasets** from just a few sample images. It’s designed to make dataset creation fast, flexible, and highly customizable.

**Features include:**

* Automatic **annotations and labeling**
* **Geometric variations** (rotation, scaling, flipping, etc.)
* **Visual effects** like color adjustments, filters, and lighting changes
* **Background and texture modifications**
* Adding **noise** to make datasets more robust for training

This tool is perfect for **AI/ML enthusiasts, researchers, and developers** who want to create high-quality datasets without manually collecting and labeling thousands of images.

**It’s fully open-source and ready to use!** [Github repo link](https://github.com/ragulnathMB/GENxCRY)

https://redd.it/1nrljl0
@r_opensource