Ghostfolio is open-source wealth-management software for recording investments and viewing portfolio performance, allocation and accounts. It can replace a paid tracker or an increasingly fragile spreadsheet; it is not a broker, tax package, recommendation engine or source of authoritative prices.
What it tracks—and what it cannot decide
Record buys, sells, dividends, fees, cash and accounts, then use Ghostfolio to view holdings and allocation. Its supported data includes stocks, ETFs, cryptocurrency and other instruments its providers recognise. Coverage varies by exchange, asset and region, so compare quantities, prices and currency treatment with broker statements. Use a fictional account such as “Example Global Brokerage” while learning.
Importing exported transactions avoids sharing live brokerage credentials. Keep original CSV or statement records, import a small sample first and review every row. Charts are records of past inputs, never investment advice or a reason to buy an asset.
Docker setup for a real server
The current upstream Compose file runs Ghostfolio, PostgreSQL and Redis. That means persistent database storage, memory for three services, unique secrets and routine updates. Start with the official Docker folder: copy its environment template, set unique Redis/PostgreSQL passwords plus random token and JWT secrets, then start Compose from that folder. The official stack exposes Ghostfolio on port 3333, makes it wait for healthy PostgreSQL and Redis, and persists PostgreSQL data.
Do not expose port 3333 carelessly. Put an internet-facing installation behind HTTPS and strong authentication, restrict it to a private network where possible, and never commit its .env file. A small VPS or home server can work, but hosting, domain, electricity and backup costs are separate from the software.
Market data and privacy
Market-data providers can be delayed, rate-limited or incomplete. Verify regional listings and multi-currency totals before relying on them. Self-hosting keeps the transaction database under your control, but provider queries, browser logs and configured integrations may still disclose information. Protect both the web app and database backups as sensitive financial records.
Exports, recovery and honest limits
Export activities regularly, and back up the PostgreSQL volume before changes. Read the official release notes, take a database backup, then verify login, balances and a sample import after upgrading. Test a restore to an isolated copy. Ghostfolio is too complicated for anyone who needs automatic reconciliation, tax forms, guaranteed market coverage, professional advice or zero maintenance.
FAQ
Does it need PostgreSQL and Redis?
Yes, the project’s current official Compose stack includes both.
Can it replace tax software?
No. Keep official records and use appropriate tax tools or a qualified professional.
Should I make it public?
Not without HTTPS, authentication and restricted access; it contains sensitive financial history.