Reading and bookmarks, checked 2026-09-07

Miniflux: Docker configuration reference

Self-hosted minimalist feed reader with full-text search, a small REST API and no JavaScript by default.

At a glance

Ports

Ports
PortWhat listensSource
8080Default HTTP listener inside the container, overridable with LISTEN_ADDR or PORT.source for port 8080

Environment variables

Environment variables
VariableRequiredWhat it doesExampleSource
BASE_URLNoBase URL used to generate every HTML link and the cookie path. Defaults to http://localhost, which is wrong the moment the app sits behind a proxy on a real domain.https://reader.example.comsource for BASE_URL
DATABASE_URLYesPostgreSQL connection string. Defaults to a local postgres/postgres credential pair that will not match a real database.postgres://miniflux:secret@db/miniflux?sslmode=disablesource for DATABASE_URL
RUN_MIGRATIONSNoRuns database migrations on startup. Disabled by default, so a fresh database is never initialised unless this is set at least once.1source for RUN_MIGRATIONS
CREATE_ADMINNoCreates an admin user from ADMIN_USERNAME and ADMIN_PASSWORD on startup. Both variables can be removed once the account exists.1source for CREATE_ADMIN
TRUSTED_REVERSE_PROXY_NETWORKSNoCIDR list allowed to set the proxy authentication header plus X-Forwarded-For, X-Forwarded-Proto and X-Real-Ip. Left empty, those headers from the proxy are ignored.172.16.0.0/12source for TRUSTED_REVERSE_PROXY_NETWORKS

Volumes that must persist

Volumes
PathWhat is in itSource
/var/lib/postgresql/data (db)The entire dataset. Miniflux itself is stateless; everything lives in Postgres. Note the mount path changes to /var/lib/postgresql on the Postgres 18 image.source for /var/lib/postgresql/data

Behind a reverse proxy

What it needs alongside it

Dependencies
DependencyWhySource
PostgreSQLRequired application database. The documented compose example pairs Miniflux with postgres:18.source for PostgreSQL

Release timeline

Releases
VersionDateBreakingWhat changedSource
2.3.32026-07-24NoAdds feed and entry language detection from RSS and Atom language elements.source for release 2.3.3
2.3.22026-06-27NoImproves full-text search with websearch_to_tsquery, supporting quoted phrases and negation.source for release 2.3.2
2.3.12026-05-29NoSecurity release fixing an OAuth account binding vulnerability and an open redirect issue.source for release 2.3.1
2.3.02026-05-16NoRestricts WebAuthn login to discoverable credentials to prevent username enumeration before password verification.source for release 2.3.0
2.2.192026-04-05NoRemoves sensitive values from log messages and hardens OAuth2 by verifying OIDC ID token signatures.source for release 2.2.19

If it is not coming up

Read from the upstream documentation, repository and container registry by Keita Emsden on 2026-09-07. Every row links the page it came from. Upstream changes without telling anyone, so check the source link before you rely on a value.

Other app references

All app references