01-wallos.md
kstack: book: Centerpoint Home Lab chapter: Finance page: Wallos tags: [wallos, subscriptions, finance, sqlite]
Overview
Wallos is a self-hosted subscription and recurring payment tracker. It tracks monthly, annual, and custom-interval subscriptions, calculates total spending, and provides a visual dashboard of recurring costs. Data is stored in a SQLite database. Authentication is Wallos' own built-in user system — no Authentik integration. External-only route.
Access
| Type | URL | Auth |
|---|---|---|
| External | https://wallos.jeevesconsults.ca |
GeoBlock + CrowdSec (own auth) |
No internal home.local route configured.
Configuration
Image: bellamy/wallos:latest
Runtime: PHP 8.3
Traefik Labels
traefik.http.routers.wallos.rule: Host(`wallos.jeevesconsults.ca`)
traefik.http.routers.wallos.entrypoints: websecure
traefik.http.routers.wallos.tls.certresolver: letsencrypt
traefik.http.routers.wallos.middlewares: plex-geoblock@file,crowdsec-bouncer@file,wallos-headers
traefik.http.middlewares.wallos-headers.headers.customrequestheaders.X-Forwarded-Proto: https
traefik.http.services.wallos.loadbalancer.server.port: 80
Volumes / Bind Mounts
| Host Path | Container Path | Purpose |
|---|---|---|
/home/jeeves/docker/wallos/db |
/var/www/html/db |
SQLite database |
/home/jeeves/docker/wallos/logos |
/var/www/html/images/uploads/logos |
Subscription logos |
Wallos stores all data in a SQLite file within the db bind mount. No external
database dependency.
Notes / Gotchas
- Wallos manages its own user accounts — no SSO or Authentik integration. Credentials are stored in the SQLite database.
- The
X-Forwarded-Proto: httpsmiddleware is required for PHP to detect HTTPS correctly when behind a reverse proxy. - Service logos are persisted in the
logosbind mount. Bothdb/andlogos/must be backed up together to fully restore the instance. - No currency exchange rate API key is required by default — Wallos supports manual rate entry.
Last Updated: 2026-06-17
No comments to display
No comments to display