This guide explains how to connect Scaryfolio to Ghostfolio Cloud or a self-hosted Ghostfolio instance. The same connection model is used on iPhone, iPad, and Mac.
Before You Begin
- Have a Ghostfolio account or self-hosted Ghostfolio server.
- Have your Ghostfolio Security Token ready.
- For self-hosted instances, know your public HTTP/HTTPS server URL.
- If your server is behind a proxy, have any required custom header names and values ready.
Connecting to Ghostfolio Cloud
Step 1: Open Settings
On iPhone or iPad, open the Settings tab. On Mac, open Scaryfolio Settings from the app menu.
Step 2: Select Ghostfolio Cloud
Under Server Configuration, select Ghostfolio Cloud. This uses https://ghostfol.io.
Step 3: Enter Your Security Token
Enter your Ghostfolio Security Token in the Security Token field.
Step 4: Connect
Tap or click Connect. If successful, Settings shows Connected and displays the server URL.
Connecting to a Self-Hosted Instance
Step 1: Open Settings
Open Scaryfolio Settings.
Step 2: Select Self-Hosted
Under Server Configuration, select Self-Hosted.
Step 3: Enter Your Server URL
Enter the URL for your Ghostfolio server, for example:
http://unsecure-ghostfolio.example.comhttps://secure-ghostfolio.example.comhttps://ghostfolio.example.com:3333
Only http:// and https:// schemes are allowed.
Step 4: Configure Custom Headers if Needed
Use Custom Headers (Optional) only if your server requires extra HTTP headers. Common examples include Cloudflare Access client headers or reverse proxy authentication tokens.
- Expand Custom Headers.
- Tap or click Add Header.
- Enter the header name.
- Enter the header value.
- Repeat for additional headers.
Scaryfolio sends these headers with requests to your self-hosted Ghostfolio server.
Step 5: Enter Your Security Token
Enter your Ghostfolio Security Token.
Step 6: Connect
Tap or click Connect.
What Happens During Connection?
Scaryfolio sends your Security Token to Ghostfolio's authentication endpoint and receives a bearer token. The bearer token is then used for API requests. If Ghostfolio returns an unauthorized response later and the Security Token is still available, Scaryfolio attempts to refresh the bearer token automatically.
Connection Status
| Status | Meaning |
|---|---|
| Connected | Scaryfolio has authenticated successfully and can create authenticated API requests. |
| Not Connected | Scaryfolio does not currently have a usable bearer token. |
Ghostfolio User Settings
After connecting, Scaryfolio can show Ghostfolio User Settings in Settings. This screen lets you update Base Currency and Zen Mode.
- Base Currency: Changes the base currency saved in Ghostfolio and refreshes Scaryfolio data.
- Zen Mode: Toggles Ghostfolio's distraction-free mode setting.
These settings are written back to Ghostfolio. If saving fails, check your connection, server availability, and whether your Ghostfolio instance supports updating user settings through the API.
Syncing to Apple Watch
Apple Watch setup requires the iPhone app. After the iPhone app is connected and Scaryfolio Pro is active, open Settings and use Sync to Apple Watch if credentials do not sync automatically.
Disconnecting
- Open Settings.
- Tap or click Disconnect.
- Confirm the action.
This clears the stored server settings, Security Token, bearer token, watch credentials, and app data loaded from the connection.
Common Connection Issues
Connect Button is Disabled
- Make sure the Security Token field is not empty.
Authentication Failed
- Copy the Security Token again from Ghostfolio.
- Remove leading or trailing spaces.
- Confirm the token has not expired or been changed.
Cannot Connect to Self-Hosted Server
- Open the server URL in Safari on the same device.
- Check the server is online and reachable from your network.
- Verify DNS, firewall, VPN, and reverse proxy configuration.
- Verify custom headers if your proxy requires them.
SSL or Certificate Errors
- Use a valid HTTPS certificate.
- Avoid self-signed certificates on Apple platforms unless your device is configured to trust them.
- Include the correct hostname in the certificate.