Actual Budget - Post Install

[MickLesk]

[githubaff0]

I just installed Actual Budget recently. I wanted use HTTPS instead of using fallback mode, so I can share some of my notes/findings about setting up an HTTPS reverse proxy for Actual Budget.

1. I wanted to use HTTPS instead of fallback mode because of this thread: https://www.reddit.com/r/actualbudgeting/comments/1d6ldvo/how_important_is_httpssharedarraybuffer_to_not/
2. The SharedArrayBuffer issue seems to be due to different browser behavior when the browser is accessing http to localhost (no problem) vs http to non-localhost (problem) vs https to non-localhost (no problem) - [Bug]: Using full URL vs localhost results in merged budget Files actualbudget/actual#436 (comment)
3. So this means you can resolve the issue with a reverse proxy terminating the HTTPS connection as an alternative to enabling HTTPS directly on your Actual Budget server.
4. The Actual software doesn't support mapping the server to a subdir path in a proxy. See [Feature] Allow changing the base URL actualbudget/actual#672 (comment)
5. If you happen to use DuckDNS for your homelab domain/cert, note that DuckDNS will resolve subdomains of your DuckDNS domain, i.e. if you register foobar.duckdns.org, then actual.foorbar.duckdns.org will resolve as well. See https://www.reddit.com/r/homelab/comments/89li2u/comment/dwsk7qo/
6. You may run into problems if you try to register multiple DuckDNS domains (normal and subdomain or wildcard) on single cert via certbot using DNS challenge. See problem and possible solutions here: https://superuser.com/q/1839628 - I just registered a separate cert for my actual subdomain