SpendHawk is a single-user self-hosted app. It binds to localhost by default. Binding to 0.0.0.0 without auth is rejected unless SPENDHAWK_UNSAFE_DISABLE_AUTH=true is set. Secrets require SPENDHAWK_ENCRYPTION_KEY before they can be saved in the settings table.