Invoice Ninja
Invoice Ninja
Get Started with Apps!
Get Started with Apps!
App Version: 5.11.70
(Changelog)
Keywords: finance
Train: Community
Home Page: https://invoiceninja.com/
Keywords: finance
Train: Community
Home Page: https://invoiceninja.com/
Invoice Ninja Details
Added: 2025-01-09
Last Updated: 2025-04-23
Added: 2025-01-09
Last Updated: 2025-04-23
Invoices, Expenses and Tasks built with Laravel, Flutter and React
Run as Context- Invoice Ninja runs as non-root user.
Group: 999 / invoice-ninja
User: 999 / invoice-ninja - Invoice Ninja Worker runs as non-root user.
Group: 999 / invoice-ninja
User: 999 / invoice-ninja - Invoice Ninja Scheduler runs as non-root user.
Group: 999 / invoice-ninja
User: 999 / invoice-ninja - MariaDB runs as non-root user.
Group: 999 / mariadb
User: 999 / mariadb - Redis runs as a non-root user and root group.
Group: 0 / root
User: 1001 / redis
×
![Full Screenshot]()
Security Capabilities
- Invoice Ninja App, Worker and Scheduler are able to chown files.
- Invoice Ninja App, Worker and Scheduler is able to bypass permission checks for it's sub-processes.
- Invoice Ninja App, Worker and Scheduler is able to bypass permission checks for it's sub-processes.
- Invoice Ninja App, Worker and Scheduler is able to bypass permission checks.
- Invoice Ninja App, Worker and Scheduler is able to bypass permission checks.
- Invoice Ninja App, Worker and Scheduler is able to bind a socket to internet domain privileged ports (port numbers less than 1024).
App Metadata (Raw File)
{
"1.0.45": {
"healthy": true,
"supported": true,
"healthy_error": null,
"location": "/__w/apps/apps/trains/community/invoice-ninja/1.0.45",
"last_update": "2025-04-23 17:40:39",
"required_features": [],
"human_version": "5.11.70_1.0.45",
"version": "1.0.45",
"app_metadata": {
"app_version": "5.11.70",
"capabilities": [
{
"description": "Invoice Ninja App, Worker and Scheduler are able to chown files.",
"name": "CHOWN"
},
{
"description": "Invoice Ninja App, Worker and Scheduler is able to bypass permission checks for it's sub-processes.",
"name": "FOWNER"
},
{
"description": "Invoice Ninja App, Worker and Scheduler is able to bypass permission checks for it's sub-processes.",
"name": "DAC_OVERRIDE"
},
{
"description": "Invoice Ninja App, Worker and Scheduler is able to bypass permission checks.",
"name": "SETGID"
},
{
"description": "Invoice Ninja App, Worker and Scheduler is able to bypass permission checks.",
"name": "SETUID"
},
{
"description": "Invoice Ninja App, Worker and Scheduler is able to bind a socket to internet domain privileged ports (port numbers less than 1024).",
"name": "NET_BIND_SERVICE"
}
],
"categories": [
"productivity"
],
"changelog_url": "https://github.com/invoiceninja/dockerfiles/releases",
"date_added": "2025-01-09",
"description": "Invoices, Expenses and Tasks built with Laravel, Flutter and React",
"home": "https://invoiceninja.com/",
"host_mounts": [],
"icon": "https://media.sys.truenas.net/apps/invoice-ninja/icons/icon.png",
"keywords": [
"finance"
],
"lib_version": "2.1.16",
"lib_version_hash": "dac15686f882b9ce65b8549a3d5c0ed7bafe2df7a9028880d1a99b0ff4af1eff",
"maintainers": [
{
"email": "dev@ixsystems.com",
"name": "truenas",
"url": "https://www.truenas.com/"
}
],
"name": "invoice-ninja",
"run_as_context": [
{
"description": "Invoice Ninja runs as non-root user.",
"gid": 999,
"group_name": "invoice-ninja",
"uid": 999,
"user_name": "invoice-ninja"
},
{
"description": "Invoice Ninja Worker runs as non-root user.",
"gid": 999,
"group_name": "invoice-ninja",
"uid": 999,
"user_name": "invoice-ninja"
},
{
"description": "Invoice Ninja Scheduler runs as non-root user.",
"gid": 999,
"group_name": "invoice-ninja",
"uid": 999,
"user_name": "invoice-ninja"
},
{
"description": "MariaDB runs as non-root user.",
"gid": 999,
"group_name": "mariadb",
"uid": 999,
"user_name": "mariadb"
},
{
"description": "Redis runs as a non-root user and root group.",
"gid": 0,
"group_name": "root",
"uid": 1001,
"user_name": "redis"
}
],
"screenshots": [],
"sources": [
"https://github.com/invoiceninja/dockerfiles"
],
"title": "Invoice Ninja",
"train": "community",
"version": "1.0.45"
},
"schema": {
"groups": [
{
"name": "Invoice Ninja Configuration",
"description": "Configure Invoice Ninja"
},
{
"name": "Network Configuration",
"description": "Configure Network for Invoice Ninja"
},
{
"name": "Storage Configuration",
"description": "Configure Storage for Invoice Ninja"
},
{
"name": "Labels Configuration",
"description": "Configure Labels for Invoice Ninja"
},
{
"name": "Resources Configuration",
"description": "Configure Resources for Invoice Ninja"
}
],
"questions": [
{
"variable": "invoice_ninja",
"label": "",
"group": "Invoice Ninja Configuration",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "db_password",
"label": "Database Password",
"description": "The password for Invoice Ninja.",
"schema": {
"type": "string",
"default": "",
"required": true,
"private": true
}
},
{
"variable": "db_root_password",
"label": "Database Root Password",
"description": "The root password for Invoice Ninja.",
"schema": {
"type": "string",
"default": "",
"required": true,
"private": true
}
},
{
"variable": "redis_password",
"label": "Redis Password",
"description": "The password for Invoice Ninja.",
"schema": {
"type": "string",
"default": "",
"required": true,
"private": true
}
},
{
"variable": "app_key",
"label": "App Key",
"description": "The app key for Invoice Ninja.</br>\nMust be exactly 32 characters long.</br>\n",
"schema": {
"type": "string",
"min_length": 32,
"max_length": 32,
"default": "",
"required": true,
"private": true
}
},
{
"variable": "app_url",
"label": "App URL",
"description": "The base URL for Invoice Ninja.</br>\nExamples:</br>\nhttps://firefly.example.com </br>\nhttp://192.168.1.100:30064\n",
"schema": {
"type": "uri",
"default": ""
}
},
{
"variable": "initial_user_email",
"label": "Initial User Email",
"description": "The initial user email for Invoice Ninja.",
"schema": {
"type": "string",
"default": "",
"required": true
}
},
{
"variable": "initial_user_password",
"label": "Initial User Password",
"description": "The initial user password for Invoice Ninja.",
"schema": {
"type": "string",
"default": "",
"private": true,
"required": true
}
},
{
"variable": "additional_envs",
"label": "Additional Environment Variables",
"description": "Configure additional environment variables for Invoice Ninja.",
"schema": {
"type": "list",
"default": [],
"items": [
{
"variable": "env",
"label": "Environment Variable",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "name",
"label": "Name",
"schema": {
"type": "string",
"required": true
}
},
{
"variable": "value",
"label": "Value",
"schema": {
"type": "string",
"required": true
}
}
]
}
}
]
}
}
]
}
},
{
"variable": "network",
"label": "",
"group": "Network Configuration",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "web_port",
"label": "WebUI Port",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "bind_mode",
"label": "Port Bind Mode",
"description": "The port bind mode.</br>\n- Publish: The port will be published on the host for external access.</br>\n- Expose: The port will be exposed for inter-container communication.</br>\n- None: The port will not be exposed or published.</br>\nNote: If the Dockerfile defines an EXPOSE directive,\nthe port will still be exposed for inter-container communication regardless of this setting.\n",
"schema": {
"type": "string",
"default": "published",
"enum": [
{
"value": "published",
"description": "Publish port on the host for external access"
},
{
"value": "exposed",
"description": "Expose port for inter-container communication"
},
{
"value": "",
"description": "None"
}
]
}
},
{
"variable": "port_number",
"label": "Port Number",
"schema": {
"type": "int",
"default": 31105,
"required": true,
"$ref": [
"definitions/port"
]
}
},
{
"variable": "host_ips",
"label": "Host IPs",
"description": "IPs on the host to bind this port",
"schema": {
"type": "list",
"show_if": [
[
"bind_mode",
"=",
"published"
]
],
"default": [],
"items": [
{
"variable": "host_ip",
"label": "Host IP",
"schema": {
"type": "string",
"required": true,
"$ref": [
"definitions/node_bind_ip"
]
}
}
]
}
}
]
}
}
]
}
},
{
"variable": "storage",
"label": "",
"group": "Storage Configuration",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "storage",
"label": "Invoice Ninja Storage",
"description": "The path to store Invoice Ninja Storage.",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "type",
"label": "Type",
"description": "ixVolume: Is dataset created automatically by the system.</br>\nHost Path: Is a path that already exists on the system.\n",
"schema": {
"type": "string",
"required": true,
"immutable": true,
"default": "ix_volume",
"enum": [
{
"value": "host_path",
"description": "Host Path (Path that already exists on the system)"
},
{
"value": "ix_volume",
"description": "ixVolume (Dataset created automatically by the system)"
}
]
}
},
{
"variable": "ix_volume_config",
"label": "ixVolume Configuration",
"description": "The configuration for the ixVolume dataset.",
"schema": {
"type": "dict",
"show_if": [
[
"type",
"=",
"ix_volume"
]
],
"$ref": [
"normalize/ix_volume"
],
"attrs": [
{
"variable": "acl_enable",
"label": "Enable ACL",
"description": "Enable ACL for the storage.",
"schema": {
"type": "boolean",
"default": false
}
},
{
"variable": "dataset_name",
"label": "Dataset Name",
"description": "The name of the dataset to use for storage.",
"schema": {
"type": "string",
"required": true,
"immutable": true,
"hidden": true,
"default": "storage"
}
},
{
"variable": "acl_entries",
"label": "ACL Configuration",
"schema": {
"type": "dict",
"show_if": [
[
"acl_enable",
"=",
true
]
],
"attrs": []
}
}
]
}
},
{
"variable": "host_path_config",
"label": "Host Path Configuration",
"schema": {
"type": "dict",
"show_if": [
[
"type",
"=",
"host_path"
]
],
"attrs": [
{
"variable": "acl_enable",
"label": "Enable ACL",
"description": "Enable ACL for the storage.",
"schema": {
"type": "boolean",
"default": false
}
},
{
"variable": "acl",
"label": "ACL Configuration",
"schema": {
"type": "dict",
"show_if": [
[
"acl_enable",
"=",
true
]
],
"attrs": [],
"$ref": [
"normalize/acl"
]
}
},
{
"variable": "path",
"label": "Host Path",
"description": "The host path to use for storage.",
"schema": {
"type": "hostpath",
"show_if": [
[
"acl_enable",
"=",
false
]
],
"required": true
}
}
]
}
}
]
}
},
{
"variable": "mariadb_data",
"label": "Invoice Ninja MariaDB Data Storage",
"description": "The path to store Invoice Ninja MariaDB Data.",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "type",
"label": "Type",
"description": "ixVolume: Is dataset created automatically by the system.</br>\nHost Path: Is a path that already exists on the system.\n",
"schema": {
"type": "string",
"required": true,
"immutable": true,
"default": "ix_volume",
"enum": [
{
"value": "host_path",
"description": "Host Path (Path that already exists on the system)"
},
{
"value": "ix_volume",
"description": "ixVolume (Dataset created automatically by the system)"
}
]
}
},
{
"variable": "ix_volume_config",
"label": "ixVolume Configuration",
"description": "The configuration for the ixVolume dataset.",
"schema": {
"type": "dict",
"show_if": [
[
"type",
"=",
"ix_volume"
]
],
"$ref": [
"normalize/ix_volume"
],
"attrs": [
{
"variable": "acl_enable",
"label": "Enable ACL",
"description": "Enable ACL for the storage.",
"schema": {
"type": "boolean",
"default": false
}
},
{
"variable": "dataset_name",
"label": "Dataset Name",
"description": "The name of the dataset to use for storage.",
"schema": {
"type": "string",
"required": true,
"immutable": true,
"hidden": true,
"default": "mariadb_data"
}
},
{
"variable": "acl_entries",
"label": "ACL Configuration",
"schema": {
"type": "dict",
"show_if": [
[
"acl_enable",
"=",
true
]
],
"attrs": []
}
}
]
}
},
{
"variable": "host_path_config",
"label": "Host Path Configuration",
"schema": {
"type": "dict",
"show_if": [
[
"type",
"=",
"host_path"
]
],
"attrs": [
{
"variable": "acl_enable",
"label": "Enable ACL",
"description": "Enable ACL for the storage.",
"schema": {
"type": "boolean",
"default": false
}
},
{
"variable": "acl",
"label": "ACL Configuration",
"schema": {
"type": "dict",
"show_if": [
[
"acl_enable",
"=",
true
]
],
"attrs": [],
"$ref": [
"normalize/acl"
]
}
},
{
"variable": "path",
"label": "Host Path",
"description": "The host path to use for storage.",
"schema": {
"type": "hostpath",
"show_if": [
[
"acl_enable",
"=",
false
]
],
"required": true
}
}
]
}
}
]
}
},
{
"variable": "additional_storage",
"label": "Additional Storage",
"description": "Additional storage for Invoice Ninja.",
"schema": {
"type": "list",
"default": [],
"items": [
{
"variable": "storageEntry",
"label": "Storage Entry",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "type",
"label": "Type",
"description": "ixVolume: Is dataset created automatically by the system.</br>\nHost Path: Is a path that already exists on the system.</br>\nSMB Share: Is a SMB share that is mounted to as a volume.\n",
"schema": {
"type": "string",
"required": true,
"default": "ix_volume",
"immutable": true,
"enum": [
{
"value": "host_path",
"description": "Host Path (Path that already exists on the system)"
},
{
"value": "ix_volume",
"description": "ixVolume (Dataset created automatically by the system)"
},
{
"value": "cifs",
"description": "SMB/CIFS Share (Mounts a volume to a SMB share)"
}
]
}
},
{
"variable": "read_only",
"label": "Read Only",
"description": "Mount the volume as read only.",
"schema": {
"type": "boolean",
"default": false
}
},
{
"variable": "mount_path",
"label": "Mount Path",
"description": "The path inside the container to mount the storage.",
"schema": {
"type": "path",
"required": true
}
},
{
"variable": "host_path_config",
"label": "Host Path Configuration",
"schema": {
"type": "dict",
"show_if": [
[
"type",
"=",
"host_path"
]
],
"attrs": [
{
"variable": "acl_enable",
"label": "Enable ACL",
"description": "Enable ACL for the storage.",
"schema": {
"type": "boolean",
"default": false
}
},
{
"variable": "acl",
"label": "ACL Configuration",
"schema": {
"type": "dict",
"show_if": [
[
"acl_enable",
"=",
true
]
],
"attrs": [],
"$ref": [
"normalize/acl"
]
}
},
{
"variable": "path",
"label": "Host Path",
"description": "The host path to use for storage.",
"schema": {
"type": "hostpath",
"show_if": [
[
"acl_enable",
"=",
false
]
],
"required": true
}
}
]
}
},
{
"variable": "ix_volume_config",
"label": "ixVolume Configuration",
"description": "The configuration for the ixVolume dataset.",
"schema": {
"type": "dict",
"show_if": [
[
"type",
"=",
"ix_volume"
]
],
"$ref": [
"normalize/ix_volume"
],
"attrs": [
{
"variable": "acl_enable",
"label": "Enable ACL",
"description": "Enable ACL for the storage.",
"schema": {
"type": "boolean",
"default": false
}
},
{
"variable": "dataset_name",
"label": "Dataset Name",
"description": "The name of the dataset to use for storage.",
"schema": {
"type": "string",
"required": true,
"immutable": true,
"default": "storage_entry"
}
},
{
"variable": "acl_entries",
"label": "ACL Configuration",
"schema": {
"type": "dict",
"show_if": [
[
"acl_enable",
"=",
true
]
],
"attrs": [],
"$ref": [
"normalize/acl"
]
}
}
]
}
},
{
"variable": "cifs_config",
"label": "SMB Configuration",
"description": "The configuration for the SMB dataset.",
"schema": {
"type": "dict",
"show_if": [
[
"type",
"=",
"cifs"
]
],
"attrs": [
{
"variable": "server",
"label": "Server",
"description": "The server to mount the SMB share.",
"schema": {
"type": "string",
"required": true
}
},
{
"variable": "path",
"label": "Path",
"description": "The path to mount the SMB share.",
"schema": {
"type": "string",
"required": true
}
},
{
"variable": "username",
"label": "Username",
"description": "The username to use for the SMB share.",
"schema": {
"type": "string",
"required": true
}
},
{
"variable": "password",
"label": "Password",
"description": "The password to use for the SMB share.",
"schema": {
"type": "string",
"required": true,
"private": true
}
},
{
"variable": "domain",
"label": "Domain",
"description": "The domain to use for the SMB share.",
"schema": {
"type": "string"
}
}
]
}
}
]
}
}
]
}
}
]
}
},
{
"variable": "labels",
"label": "",
"group": "Labels Configuration",
"schema": {
"type": "list",
"default": [],
"items": [
{
"variable": "label",
"label": "Label",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "key",
"label": "Key",
"schema": {
"type": "string",
"required": true
}
},
{
"variable": "value",
"label": "Value",
"schema": {
"type": "string",
"required": true
}
},
{
"variable": "containers",
"label": "Containers",
"description": "Containers where the label should be applied",
"schema": {
"type": "list",
"items": [
{
"variable": "container",
"label": "Container",
"schema": {
"type": "string",
"required": true,
"enum": [
{
"value": "firefly-iii",
"description": "firefly-iii"
},
{
"value": "firefly-iii-importer",
"description": "firefly-iii-importer"
},
{
"value": "firefly-iii-cron",
"description": "firefly-iii-cron"
},
{
"value": "redis",
"description": "redis"
},
{
"value": "postgres",
"description": "postgres"
}
]
}
}
]
}
}
]
}
}
]
}
},
{
"variable": "resources",
"label": "",
"group": "Resources Configuration",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "limits",
"label": "Limits",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "cpus",
"label": "CPUs",
"description": "CPUs limit for Invoice Ninja.",
"schema": {
"type": "int",
"default": 2,
"required": true
}
},
{
"variable": "memory",
"label": "Memory (in MB)",
"description": "Memory limit for Invoice Ninja.",
"schema": {
"type": "int",
"default": 4096,
"required": true
}
}
]
}
}
]
}
}
]
},
"readme": "<h1>Invoice Ninja</h1> <p><a href=\"https://invoiceninja.com/\">Invoice Ninja</a> is a source-available invoice, quote, project and time-tracking app built with Laravel</p>",
"changelog": null,
"chart_metadata": {
"app_version": "5.11.70",
"capabilities": [
{
"description": "Invoice Ninja App, Worker and Scheduler are able to chown files.",
"name": "CHOWN"
},
{
"description": "Invoice Ninja App, Worker and Scheduler is able to bypass permission checks for it's sub-processes.",
"name": "FOWNER"
},
{
"description": "Invoice Ninja App, Worker and Scheduler is able to bypass permission checks for it's sub-processes.",
"name": "DAC_OVERRIDE"
},
{
"description": "Invoice Ninja App, Worker and Scheduler is able to bypass permission checks.",
"name": "SETGID"
},
{
"description": "Invoice Ninja App, Worker and Scheduler is able to bypass permission checks.",
"name": "SETUID"
},
{
"description": "Invoice Ninja App, Worker and Scheduler is able to bind a socket to internet domain privileged ports (port numbers less than 1024).",
"name": "NET_BIND_SERVICE"
}
],
"categories": [
"productivity"
],
"changelog_url": "https://github.com/invoiceninja/dockerfiles/releases",
"date_added": "2025-01-09",
"description": "Invoices, Expenses and Tasks built with Laravel, Flutter and React",
"home": "https://invoiceninja.com/",
"host_mounts": [],
"icon": "https://media.sys.truenas.net/apps/invoice-ninja/icons/icon.png",
"keywords": [
"finance"
],
"lib_version": "2.1.16",
"lib_version_hash": "dac15686f882b9ce65b8549a3d5c0ed7bafe2df7a9028880d1a99b0ff4af1eff",
"maintainers": [
{
"email": "dev@ixsystems.com",
"name": "truenas",
"url": "https://www.truenas.com/"
}
],
"name": "invoice-ninja",
"run_as_context": [
{
"description": "Invoice Ninja runs as non-root user.",
"gid": 999,
"group_name": "invoice-ninja",
"uid": 999,
"user_name": "invoice-ninja"
},
{
"description": "Invoice Ninja Worker runs as non-root user.",
"gid": 999,
"group_name": "invoice-ninja",
"uid": 999,
"user_name": "invoice-ninja"
},
{
"description": "Invoice Ninja Scheduler runs as non-root user.",
"gid": 999,
"group_name": "invoice-ninja",
"uid": 999,
"user_name": "invoice-ninja"
},
{
"description": "MariaDB runs as non-root user.",
"gid": 999,
"group_name": "mariadb",
"uid": 999,
"user_name": "mariadb"
},
{
"description": "Redis runs as a non-root user and root group.",
"gid": 0,
"group_name": "root",
"uid": 1001,
"user_name": "redis"
}
],
"screenshots": [],
"sources": [
"https://github.com/invoiceninja/dockerfiles"
],
"title": "Invoice Ninja",
"train": "community",
"version": "1.0.45"
}
}
}Support, maintenance, and documentation for applications within the Community catalog is handled by the TrueNAS community. The TrueNAS Applications Portal hosts but does not validate or maintain any linked resources associated with this app.
There currently aren’t any resources available for this application!
Please help the TrueNAS community create content or discuss this application in the TrueNAS Community forum.