Overview
Secure server password sign-in
Actual Budget served through the nginx reverse proxy on port 80 - a unique server password is generated for every instance on first boot and required to sign in.
Secure server password sign-in
Envelope budget view
Accounts and transactions
This is a repackaged open source software product wherein additional charges apply for cloudimg support services.
Why This AMI Instead of Self-Deploying?
Actual Budget is a popular open source, local-first personal finance application built around the proven envelope budgeting method. Deploying it yourself means installing Node.js, configuring npm globally, writing systemd units, hardening nginx, generating secure passwords, and maintaining the stack over time. This AMI eliminates that effort entirely - your self-hosted budget server with multi-device sync and the bundled web app is running within minutes of launch, not hours. You get a pre-hardened, tested configuration backed by 24/7 expert support with a one-hour average response for critical issues, something community forums cannot provide.
The current release available is Actual Budget 25.6.
Application Stack
The Actual sync server is installed globally with npm on Node.js 22 LTS and run by an unprivileged service account. It listens on the loopback address and an nginx reverse proxy fronts the application on port 80, with a raised upload limit for budget file sync. A systemd service starts the server on boot and restarts it on failure. The bundled web client is served by the same process, so a browser is all your users need.
Secure By Default
Many pre-built images ship with shared or default passwords - a common vulnerability that exposes instances immediately after launch. This image eliminates that risk entirely:
- A unique server password is generated for every instance on its first boot
- The password is applied through Actual's own bootstrap mechanism
- It is stored in a root-only file, inaccessible to unprivileged users
- No shared or default password ships in the image
- Build-time setup is wiped before capture so nothing sensitive is baked in
Your data lives in your browser and on your own server, never on a third party's cloud.
Ready To Use
Browse to the instance on port 80, enter the generated server password, and create your budget - or import an existing one from Actual, YNAB, or a nYNAB export. Connect the desktop and mobile apps to the same server for end-to-end synced budgeting across your devices. Your database and budget files live on a dedicated, independently resizable storage volume kept separate from the operating system disk.
What You Avoid By Using This AMI
- Manual Node.js and npm installation and version management
- Writing and debugging systemd service units
- Configuring nginx as a reverse proxy with correct upload limits
- Generating and securely storing instance passwords
- Ongoing maintenance and security patching without expert guidance
- Troubleshooting sync, encryption, and backup issues alone
cloudimg Support
24/7 technical support by email and chat with a one-hour average response for critical issues. Our engineers help with Actual Budget deployment, multi-device sync, importing existing budgets, end-to-end encryption, TLS termination, backups, and scaling.
Use Cases
- Self-hosted personal and household budgeting with full data ownership
- A private, in-your-own-VPC alternative to SaaS budgeting services for people with data residency or privacy requirements
- Shared family budgets synced across devices
- Small business envelope budgeting
All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.
Highlights
- Actual Budget, the open source local-first envelope budgeting and personal finance app, preinstalled as a sync server (Node.js 22 LTS) behind an nginx reverse proxy on port 80, with the bundled web app served and ready with no manual setup
- Secure by default: the whole instance is protected by a single server password that is generated for every instance on first boot, applied through the server's own bootstrap mechanism and stored in a root only file
- 24/7 technical support from cloudimg, with expert help on multi device sync, importing existing budgets, end to end encryption, TLS termination, backups and scaling
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Free trial
- ...
Dimension | Description | Cost/hour |
|---|---|---|
t3.small Recommended | t3.small | $0.04 |
t3.micro | t3.micro instance type | $0.04 |
t2.micro | t2.micro instance type | $0.04 |
p5en.48xlarge | p5en.48xlarge instance type | $0.24 |
u7i-8tb.112xlarge | u7i-8tb.112xlarge instance type | $0.24 |
c8in.8xlarge | c8in.8xlarge instance type | $0.24 |
m8azn.xlarge | m8azn.xlarge instance type | $0.12 |
c8ine.12xlarge | c8ine.12xlarge instance type | $0.24 |
m5ad.12xlarge | m5ad.12xlarge instance type | $0.24 |
g5.48xlarge | g5.48xlarge instance type | $0.24 |
Vendor refund policy
Refunds available on request.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Initial release of the Actual Budget 26.6 self-hosted sync server.
Additional details
Usage instructions
Connect via SSH on port 22 as the default login user for your operating system variant (the user guide lists it per variant; on Ubuntu it is 'ubuntu'). The Actual Budget sync server is served by nginx on port 80: browse to http://<instance-public-ip>/ and enter the generated server password. Retrieve the generated password with: sudo cat /root/actual-budget-credentials.txt. The server runs on loopback port 5006 and is reached only through the nginx proxy on port 80. Configuration lives in /etc/actual-budget/actual-budget.env and the data (account.sqlite, server-files, user-files) under /var/lib/actual. The service is managed with systemctl (actual-budget.service, nginx.service). After signing in, create a new budget or import an existing one from Actual, YNAB or a nYNAB export, then connect the Actual desktop and mobile apps to this server for synced budgeting. The user guide covers first sign-in, connecting client apps, end-to-end encryption and enabling HTTPS.
Resources
Vendor resources
Support
Vendor support
cloudimg provides 24/7 technical support for this product by email and live chat.
Response Times
Critical issues receive a one-hour average response. Our engineers are available around the clock to help resolve problems that block your budgeting workflow.
What We Help With
- Deployment and initial configuration
- Multi-device sync setup and troubleshooting
- Importing existing budgets from YNAB, nYNAB, or Actual exports
- End-to-end encryption configuration
- TLS termination setup with AWS load balancers
- Backup strategies and data recovery
- Scaling and performance tuning
- Software updates and patch guidance
- Troubleshooting and issue resolution
- Refund requests
How to Reach Us
Email: support@cloudimg.co.uk Live chat: Available 24/7
We respond to all inquiries and work with you until your issue is resolved. If you need help at any stage - from first launch to ongoing maintenance - our team is here to assist.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
