FinDiff is a self-hosted, read-only observability platform that watches your financial databases for configuration drift — schema changes, parameter/rate-table edits, anything that shifted without a clean audit trail — and gives you a searchable, alertable history of exactly what changed, when, and by how much.
It never writes to anything it monitors. Connect it with a SELECT-only database role and even a bug in FinDiff can't touch your data — see docs/READONLY.md in the repo for the full guarantee.
PostgreSQL · MySQL · MariaDB · Microsoft SQL Server · Oracle · SQLite — one static binary, no CGO, no per-engine client libraries to install.
docker run -d \
--name findiff \
-p 8080:8080 \
-e FINDIFF_MASTER_KEY=$(openssl rand -base64 32) \
-e FINDIFF_ADMIN_USERNAME=admin \
-e FINDIFF_ADMIN_PASSWORD=changeme \
-v findiff-data:/data \
oubaidhl/findiff:latest
Then open http://localhost:8080 and log in with the admin credentials above. Change the password on first login — FinDiff will ask you to.
| Variable | Required | Default | Purpose |
|---|---|---|---|
FINDIFF_MASTER_KEY | Yes | — | Base64 32-byte key encrypting stored connection strings. Generate with openssl rand -base64 32 and keep it safe — losing it makes stored credentials unrecoverable. |
FINDIFF_ADMIN_USERNAME / FINDIFF_ADMIN_PASSWORD | First run only | — | Bootstraps the initial admin account. Ignored once a user already exists. |
FINDIFF_PORT | No | 8080 | HTTP port inside the container. |
FINDIFF_DATA_DIR | No | /data | Where FinDiff stores its own local SQLite state, snapshots, and AI Copilot uploads. Mount a volume here. |
Full README, architecture notes, and read-only guarantees: https://github.com/oubaidHL/FinDiff
Built by Oubaid HLAIMI — Cloud Engineer, IT Consulting & Automation.
Content type
Image
Digest
sha256:efbea80c7…
Size
24.6 MB
Last updated
about 3 hours ago
docker pull oubaidhl/findiff