Money 1.2.0

[Muffy0906]

Money 1.2.0

The biggest update yet: log Apple Pay purchases automatically from your iPhone, see where you spent on a map, a customizable Overview, a monthly recap, a bills calendar, and a safer sign-in. Updating keeps you signed in.

Try the live demo → (new in this release, runs in your browser with made-up data)

Highlights

Apple Pay auto-logging

• Every Apple Pay purchase can land in Firefly on its own. Add the ready-made Log to Money Shortcut, make a Wallet "Transaction" automation that runs it, and Money creates the withdrawal tagged "Apple Pay" with the payee's usual category and budget. Refunds become deposits, and repeats are ignored. Setup lives in Settings → Apple Pay and docs/apple-pay.md. (Log Apple Pay purchases automatically from an iPhone Shortcut #36, Apple Pay: link the ready-made Log to Money shortcut #47, Apple Pay: use the latest Log to Money shortcut link #49)
• The Shortcut can also send where you paid, a foreign-currency amount (converted with Firefly's latest exchange rate) and an optional category picked at checkout. (Apple Pay: keep where you paid, foreign amounts, and a category from the Shortcut #44)
• Wallet card names match your accounts more reliably, and when one doesn't, Settings → Apple Pay → Cards lets you pick its account. (Apple Pay: match cards by shared words, and pick a card's account in Settings #43)
• The Apple Pay key has a Show/Hide button, and Copy now works on plain-HTTP home installs. (Apple Pay settings: show the key, and copy it over plain HTTP #41)

Map page

• A new Map page puts the month's purchases with a location on a map, one pin per place sized by what you spent there. Tap a pin for its purchases and an Apple Maps link. Smooth panning and pinch-zoom on phones. Map tiles are fetched and cached by your Money server, so your browser only talks to Money. (Map page: purchases with a place as pins #46, Map page on Leaflet: smooth panning and pinch-zoom #48)

Overview you can arrange

• Drag cards anywhere on a snap grid, choose the column count, and toggle summary items. Empty space closes up after you customize, and dragging is steadier. (Overview: column count, summary toggles and three new cards #14, Overview: drag cards to any column at any height #15, Overview: line the insight strip up with the card columns #16, Overview: freeform tiles on a snap grid #17, Overview: collapse empty space after customizing, steadier dragging #28)
• Per-card settings (⚙ in Customize): how many rows to show, comparisons, closed accounts, trend lines and more. (Overview per-tile settings, payee period totals, logos #29)
• New cards, including Net worth history over 1 or 3 years. (Overview: column count, summary toggles and three new cards #14, Net worth history, subscription finder, goal pace and synced settings #24)

Bills, recap and review

• Bills calendar: a List / Calendar switch showing each bill on the day it was paid or is due, with paid / due / overdue totals. (Bills calendar, monthly recap, payee pages, forecast what-ifs and a review queue #33)
• Monthly recap: earned, spent, kept and net worth change against a usual month, where the money went, biggest purchases, new payees and bills, with a few sentences calling out what stands out. (Bills calendar, monthly recap, payee pages, forecast what-ifs and a review queue #33)
• Payee pages: the last twelve months for any payee or income source at a glance. (Bills calendar, monthly recap, payee pages, forecast what-ifs and a review queue #33)
• Forecast what-ifs: try out a purchase, raise or new subscription and see how it changes your projected balance and safe-to-spend. (Bills calendar, monthly recap, payee pages, forecast what-ifs and a review queue #33)
• Review queue: new transactions to check over, under Categorize. (Bills calendar, monthly recap, payee pages, forecast what-ifs and a review queue #33)
• Subscription finder: spots repeating charges that aren't bills yet and flags price increases. (Net worth history, subscription finder, goal pace and synced settings #24)
• Savings goal pace: how much a dated goal needs per month and whether you're on track. Budgets show auto-budget periods and rollovers. (Net worth history, subscription finder, goal pace and synced settings #24)

Everything else

• Logos for payees, banks and cards, served through your Money server (turn off in Settings → Logos). (Logos for payees, banks and cards #30)
• Period totals on the Payees and Income sources tabs. (Overview per-tile settings, payee period totals, logos #29)
• Your dashboard layout and choices sync between devices through Firefly. Theme, privacy and density stay per device. (Net worth history, subscription finder, goal pace and synced settings #24)
• Fixes: cash flow chart hover and tooltip (Fix cash flow chart hover highlight and tooltip #27), theme swatch edges (Clip theme swatch gradients to the circle #25).

Security

• Signing in now gives your browser a signed, HttpOnly session cookie instead of storing your password. Sessions last 30 days with "Keep me signed in", and end when DASH_PASSWORD or FIREFLY_TOKEN changes. A password saved by 1.1.0 is swapped for a session on first load, so you stay signed in. (Session cookie instead of a stored password, and rate limits on sign-in and the API #32)
• Sign-in attempts and API calls are rate-limited. (Session cookie instead of a stored password, and rate limits on sign-in and the API #32)
• All page markup is built with an escaping template tag, closing off a class of injection bugs. (Build markup with an escaping html`` template tag #22)

Upgrading

• Docker / TrueNAS / Unraid: docker compose pull && docker compose up -d, or pin ghcr.io/muffy0906/firefly-money:1.2.0. No new settings are needed.
• Running the stock nginx image with mounted files? It now also needs app/nginx.conf, app/session.js and app/ingest.js mounted, and DASH_PASSWORD drops out of NGINX_ENVSUBST_FILTER. See the comments at the bottom of docker-compose.yml.
• New: an Unraid template. (Online demo on GitHub Pages, README polish and an Unraid template #23)
• Money is now under the MIT License. (Relicense Money under the MIT License #13)

Under the hood

• Rewritten as TypeScript modules bundled with esbuild, with strict type checking throughout. (Build from TypeScript modules with esbuild #18, Turn on TypeScript strict mode #31, Type the core: S, el(), lists() and App #34, Type every parameter in app/src/core #35, Type every parameter in app/src/features #39, Type every parameter in app/src/pages #40, Type the demo API and tests, and turn noImplicitAny on #42)
• Unit tests (Vitest) and linting (oxlint) run in CI. (Add unit tests (Vitest) and linting (oxlint) to CI #21)
• Docker image built on Node 26; dependency updates. (Bump node from 22-alpine to 26-alpine #19, Bump actions/setup-node from 5 to 7 in the actions group #20, Bump the build-tools group with 3 updates #37, Bump the actions group with 2 updates #38)
• Token setup steps point at Profile → Remote access and tokens. (Point token setup steps at Profile → Remote access and tokens #12)

Full changelog: v1.1.0...v1.2.0

---

This discussion was created from the release Money 1.2.0.