What's already configured
The one-click deployment brings up a single actualbudget/actual-server container with an embedded SQLite database mounted to a persistent /data volume — there's no separate database service to configure, since Actual ships without one by design. The container restarts automatically on failure through Docker's restart policy. The app listens on port 5006 by default, and in the official Docker setup that port is typically published only to localhost, with a reverse proxy handling the public HTTPS connection.
First login and server password
Actual Budget doesn't ship with a preset admin account — the server password is either set through the ACTUAL_PASSWORD environment variable at Actual Budget installation time or entered directly in the browser on the very first page load, whichever the deployment template uses. Once set, that password is what every synced device — phone, desktop, browser — will ask for when connecting to this server.
Encryption and bank sync setup
Because Actual is local-first, the "real" budget lives as a file the client creates after logging in for the first time — the server only stores encrypted sync data, so enabling end-to-end encryption from Settings is worth doing before adding a second device.
Bank feeds aren't connected automatically: GoCardless and SimpleFIN credentials are entered manually from inside the app's Settings → Bank Sync screen after the first login, not during deployment.