sudo install -m 755 wealthfolio-server /usr/local/bin/wealthfolio-server
sudo mkdir -p /opt/wealthfolio /opt/wealthfolio_data
sudo cp -r dist /opt/wealthfolio/dist

sudo tee /opt/wealthfolio/.env >/dev/null <<EOF
WF_LISTEN_ADDR=0.0.0.0:8080
WF_DB_PATH=/opt/wealthfolio_data/wealthfolio.db
WF_STATIC_DIR=/opt/wealthfolio/dist
WF_SECRET_KEY=$(openssl rand -base64 32)
WF_AUTH_PASSWORD_HASH=<argon2id hash, see docs/self-host>
# Required when auth is enabled AND you reach the server via a different
# scheme/host/port than the bind address (e.g. reverse proxy). Must match
# the URL in the browser's address bar exactly. Setting "*" is rejected.
WF_CORS_ALLOW_ORIGINS=http://<your-server-ip>:8080
EOF
sudo chmod 600 /opt/wealthfolio/.env

sudo cp wealthfolio.service.example /etc/systemd/system/wealthfolio.service
sudo systemctl enable --now wealthfolio