Host port to expose. Change if 8088 clashes with another container.

Ziel

8088

Standard

8088

Wert

8088

Holds the SQLite database (wealthfolio.db) and the encrypted secrets file. BACK THIS UP.

Ziel

/data

Standard

/mnt/user/appdata/wealthfolio

Wert

/mnt/user/appdata/wealthfolio

REQUIRED. 32-byte key used to encrypt secrets at rest and sign session tokens. Generate ONCE with: openssl rand -base64 32 -- then save it somewhere safe. Losing it means losing all stored API keys and broker credentials.

REQUIRED unless WF_AUTH_REQUIRED=false. Argon2id PHC hash of your login password. Generate with: printf '%s' 'your-password' | argon2 yoursalt16chars -id -e -- then paste the full argon2id PHC string here.

REQUIRED when auth is enabled. Comma-separated list of origins allowed to call the API. Must EXACTLY match the URL in your browser address bar (scheme, host, and port). Example: http://192.168.1.10:8088 or https://wealthfolio.example.com

Set to false if a reverse proxy handles authentication (in which case leave WF_AUTH_PASSWORD_HASH empty).

Standard

true

Wert

true

Session access token lifetime in minutes.

Standard

60

Wert

60

HTTP request timeout in milliseconds. Default is 5 minutes -- generous to accommodate large broker syncs.

Standard

300000

Wert

300000

Bind address inside the container. Leave at 0.0.0.0:8088 unless you know what you are doing.

Standard

0.0.0.0:8088

Wert

0.0.0.0:8088

SQLite database path inside the container. Must live under /data so it persists.

Standard

/data/wealthfolio.db

Wert

/data/wealthfolio.db

Log format: text (human-readable) or json (structured).

Standard

text

Wert

text