From 55c3ad47ad10c546c8594b6ae83a5b87fff8b28c Mon Sep 17 00:00:00 2001 From: alexbelgium Date: Sun, 11 Oct 2026 08:00:42 +0200 Subject: [PATCH] fix(filebrowser_quantum): simplify the healthcheck Curl the app root: v2 answers 200, or 301 to the baseURL, which curl -f accepts, so the baseURL no longer has to be read from the config. Co-Authored-By: Claude Opus 5.5 --- filebrowser_quantum/CHANGELOG.md | 2 +- filebrowser_quantum/Dockerfile | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/filebrowser_quantum/CHANGELOG.md b/filebrowser_quantum/CHANGELOG.md index 34f740bd0e..f206a67b55 100644 --- a/filebrowser_quantum/CHANGELOG.md +++ b/filebrowser_quantum/CHANGELOG.md @@ -10,7 +10,7 @@ - Everything else is kept, including extra sources and auth/OIDC settings. - Users, shares and settings in `/config/database.db` are migrated to `/config/database.sqlite` on first start. - `http.trustProxyHeaders` is set to `true`, because the add-on always runs behind nginx on a subpath. -- The container healthcheck now uses upstream's `/health` endpoint. +- The container healthcheck now checks FileBrowser directly on port 8080 instead of an nginx stub. - Direct access on port 8071 no longer passes on a client-supplied `X-Forwarded-For`, so the IP-based login lockout cannot be bypassed now that proxy headers are trusted. Ingress keeps the forwarded chain. ## 2.0.0 (2026-10-10) diff --git a/filebrowser_quantum/Dockerfile b/filebrowser_quantum/Dockerfile index d2847c4d75..f8e2a22822 100644 --- a/filebrowser_quantum/Dockerfile +++ b/filebrowser_quantum/Dockerfile @@ -116,4 +116,4 @@ LABEL \ ################# HEALTHCHECK --interval=30s --timeout=3s --start-period=10s --retries=3 \ - CMD b="$(yq '.http.baseURL' /config/config.yaml)" && curl -f "http://localhost:8080${b%/}/health" || exit 1 + CMD curl -fs -o /dev/null http://localhost:8080/ || exit 1