services.wealthfolio.corsAllowOrigins
NixOS option
Comma-separated list of allowed CORS origins. Security Note: The server panics at startup if * is used while authentication is enabled, as this is a CSRF vector. Set explicit origins matching your deployment URL (scheme + host + port).
type: stringDefault
"*"
Example
declared in: nixos/modules/services/web-apps/wealthfolio.nixView source on NixOS/nixpkgs →"https://wealthfolio.example.com"