Wealthfolio logo Wealthfolio
Download
Docs
Unraid

Unraid

Install Wealthfolio on Unraid via Community Apps, with the official template covering ports, volumes, and required environment variables.

Wealthfolio runs as a standard Docker container on Unraid, configured through Unraid’s Docker tab. The Community Apps (CA) template covers ports, volumes, and required env vars. You just fill in the secrets.

Prerequisites

  • Unraid 6.10 or newer
  • The Community Applications plugin
  • A directory under /mnt/user/appdata/ for persistent data (template defaults to /mnt/user/appdata/wealthfolio)

Install from Community Apps

  1. Open the Apps tab in the Unraid web UI.
  2. Search for Wealthfolio.
  3. Click Install, fill in the required values below, click Apply.

That’s it. The container starts, and the WebUI is reachable at http://<unraid-ip>:8088.

Manual sideload (power users)

If you want to test a newer template before CA picks it up, or run a template Squid hasn’t approved yet, sideload it directly from the project repo. SSH into Unraid (or use the WebTerminal):

mkdir -p /boot/config/plugins/dockerMan/templates-user
curl -fsSL \
  https://raw.githubusercontent.com/afadil/wealthfolio/main/docs/self-host/unraid/template.xml \
  -o /boot/config/plugins/dockerMan/templates-user/my-wealthfolio.xml

Then in Unraid: Docker → Add Container → Template dropdown → User templates → wealthfolio.

Required values

FieldWhat to enter
WebUI PortHost port to expose. Default 8088. Change if it clashes.
AppdataLeave at /mnt/user/appdata/wealthfolio unless you have a reason to move it.
WF_SECRET_KEYopenssl rand -base64 32. Back this up, losing it means losing all secrets.
WF_AUTH_PASSWORD_HASHArgon2id PHC hash of your login password (see below).
WF_CORS_ALLOW_ORIGINSThe exact origin you’ll use, e.g. http://192.168.1.10:8088.

Generating the password hash

On any machine with argon2 installed (brew install argon2, apt install argon2, or argon2.online):

printf 'your-password' | argon2 yoursalt16chars! -id -e

Copy the entire output (starts with $argon2id$v=19$...) into the WF_AUTH_PASSWORD_HASH field.

Unraid handles the $ escaping for you, so paste the raw hash. Do not double the dollar signs like you would in a Compose .env file.

Reverse proxy (SWAG, NPM, Traefik)

If you front Wealthfolio with a proxy:

  • Set WF_CORS_ALLOW_ORIGINS to the public HTTPS URL.
  • Forward to the container’s host port (default 8088).
  • Standard websocket / Host header proxying. No special config needed.
  • If your proxy authenticates, set WF_AUTH_REQUIRED to false (advanced view) and clear WF_AUTH_PASSWORD_HASH.

See Reverse proxy setup for full examples.

Backups

Everything lives in the appdata volume:

  • wealthfolio.db: your portfolio data
  • secrets.json: encrypted with WF_SECRET_KEY

Back up the volume and the secret key together. Either alone is useless. Tools like CA Backup / Restore Appdata work fine.

Updating

In the Docker tab, click the container → Force Update. The template tracks afadil/wealthfolio:latest; switch the Repository field to a specific tag (e.g. afadil/wealthfolio:3.3.0) for production stability.

Troubleshooting

SymptomLikely cause
Container restart loop, log says WF_SECRET_KEY missingThe variable wasn’t set, or isn’t 32 bytes when base64-decoded. Regenerate with openssl rand -base64 32.
Login screen rejects correct passwordHash was generated with echo -n (trailing newline) or pasted with extra whitespace. Regenerate with printf.
CORS errors in browser consoleWF_CORS_ALLOW_ORIGINS doesn’t match the URL in your address bar (scheme + host + port must match exactly).
Port already in useChange the WebUI Port field to a free host port.

Configuration reference

Every variable the container reads is documented in Configuration.

Docker Compose Proxmox