services.wealthfolio.corsAllowOrigins

NixOS option

Comma-separated list of allowed CORS origins. Security Note: The server panics at startup if * is used while authentication is enabled, as this is a CSRF vector. Set explicit origins matching your deployment URL (scheme + host + port).

type: string
Default
"*"
Example
"https://wealthfolio.example.com"
declared in: nixos/modules/services/web-apps/wealthfolio.nixView source on NixOS/nixpkgs →