Host port to expose. Change if 8088 clashes with another container.

Cible

8088

Défaut

8088

Valeur

8088

Holds the SQLite database (wealthfolio.db) and the encrypted secrets file. BACK THIS UP.

Cible

/data

Défaut

/mnt/user/appdata/wealthfolio

Valeur

/mnt/user/appdata/wealthfolio

REQUIRED. 32-byte key used to encrypt secrets at rest and sign session tokens. Generate ONCE with: openssl rand -base64 32 -- then save it somewhere safe. Losing it means losing all stored API keys and broker credentials.

REQUIRED unless WF_AUTH_REQUIRED=false. Argon2id PHC hash of your login password. Generate with: printf '%s' 'your-password' | argon2 yoursalt16chars -id -e -- then paste the full argon2id PHC string here.

REQUIRED when auth is enabled. Comma-separated list of origins allowed to call the API. Must EXACTLY match the URL in your browser address bar (scheme, host, and port). Example: http://192.168.1.10:8088 or https://wealthfolio.example.com

Set to false if a reverse proxy handles authentication (in which case leave WF_AUTH_PASSWORD_HASH empty).

Défaut

true

Valeur

true

Session access token lifetime in minutes.

Défaut

60

Valeur

60

HTTP request timeout in milliseconds. Default is 5 minutes -- generous to accommodate large broker syncs.

Défaut

300000

Valeur

300000

Bind address inside the container. Leave at 0.0.0.0:8088 unless you know what you are doing.

Défaut

0.0.0.0:8088

Valeur

0.0.0.0:8088

SQLite database path inside the container. Must live under /data so it persists.

Défaut

/data/wealthfolio.db

Valeur

/data/wealthfolio.db

Log format: text (human-readable) or json (structured).

Défaut

text

Valeur

text