# Delta for app panels: Portainer (Stacks), CasaOS (Custom install → Import),
# Dockge, Coolify, Synology Container Manager, Unraid's Compose Manager, or
# plain `docker compose up -d`. Guide: docs/home-server.md.
#
# Nothing to fill in: start it, open http://<this machine>:3000, and Delta
# asks for your Plaid keys in the browser.
#
# Delta asks for no login until you set a password (Settings → Password).
# Until then anyone who can reach this port sees your finances, so
# run it only on a network you trust (your home LAN or Tailscale), never
# port-forwarded to the internet.
name: delta

services:
  delta:
    image: ghcr.io/zeapsu/delta:${DELTA_TAG:-latest}
    restart: unless-stopped
    environment:
      # Who may call Delta's API (Plaid Link, sync, agents): loopback plus the
      # private ranges a home network, Docker or Tailscale uses. Narrow it to
      # your own network if you like, e.g. 192.168.1.0/24.
      DELTA_ALLOWED_NETWORKS: ${DELTA_ALLOWED_NETWORKS:-10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,100.64.0.0/10}
      # How agents reach Delta (printed in their MCP configs), e.g.
      # http://192.168.1.20:3000. Optional.
      DELTA_URL: ${DELTA_URL:-}
      # Only behind your own domain (reverse proxy, tunnel): the name, e.g.
      # money.example.com. IP addresses and .local names need nothing.
      DELTA_ALLOWED_HOSTS: ${DELTA_ALLOWED_HOSTS:-}
      # 1 lets /api/v1/mcp alone answer any network, for agents that call
      # from the internet (token still required). Off by default.
      DELTA_PUBLIC_MCP: ${DELTA_PUBLIC_MCP:-}
      # The header's Update pill links to the panel update steps.
      DELTA_INSTALL: stack
    ports:
      - "${DELTA_PORT:-3000}:3000"
    volumes:
      - delta-data:/data
    x-casaos:
      ports:
        - container: "3000"
          description: { en_us: Delta web UI }
      volumes:
        - container: /data
          description: { en_us: Database and backups }

  # Plaid refresh + sync every 6 hours and a daily database backup. Shares
  # delta's network so it reaches the app on loopback.
  jobs:
    image: ghcr.io/zeapsu/delta:${DELTA_TAG:-latest}
    restart: unless-stopped
    network_mode: "service:delta"
    depends_on: [delta]
    command: ["node", "scripts/jobs.mjs"]
    volumes:
      - delta-data:/data

volumes:
  delta-data:

x-casaos:
  architectures: [amd64, arm64]
  main: delta
  author: Delta
  developer: Delta
  category: Finance
  index: /
  port_map: "3000"
  title: { en_us: Delta }
  tagline: { en_us: Your money, in one calm place }
  description:
    en_us: >-
      Self-hosted personal finance. Connects your banks through Plaid (your own
      free keys, entered on first visit) and shows spending, budgets, recurring
      charges and net worth. Your agent can read it over MCP.