tallon43/nestegg repository overview

docker run -d \
  --name nestegg \
  -p 8686:8000 \
  -e JWT_SECRET=$(openssl rand -hex 32) \
  -e ADMIN_USER=youruser \
  -e ADMIN_PASSWORD=yourpassword \
  -v /path/on/host/nestegg-data:/data \
  tallon43/nestegg:latest

Then open http://<your-server>:8686 and log in with the credentials above.

Environment variables

┌────────────────┬───────────────────────────────────────────────────────────────────┐
│    Variable    │                            Description                            │
├────────────────┼───────────────────────────────────────────────────────────────────┤
│ JWT_SECRET     │ Required. Secret key used to sign JWT tokens.                     │
├────────────────┼───────────────────────────────────────────────────────────────────┤
│ ADMIN_USER     │ Username created automatically on first boot (if no user exists). │
├────────────────┼───────────────────────────────────────────────────────────────────┤
│ ADMIN_PASSWORD │ Password for that initial admin user.                             │
├────────────────┼───────────────────────────────────────────────────────────────────┤
│ DATA_DIR       │ Where the SQLite database is stored (default /data).              │
└────────────────┴───────────────────────────────────────────────────────────────────┘

No credentials are hardcoded anywhere — the admin account is created only from
these environment variables the first time the container starts with an empty
database.