mirror of
https://github.com/alexbelgium/hassio-addons.git
synced 2026-09-21 17:23:59 +02:00
232e697301
* Fix FileBrowser Quantum direct web access
* fix(filebrowser_quantum): make direct ip:port access actually work
ports: {8080/tcp: 8071} alone (as originally proposed) publishes the app's
own port, but FileBrowser Quantum's server.baseURL is set at boot to the
Supervisor ingress-entry path (an opaque, per-install hash), so the app only
serves correctly under that exact path -- a bare port publish gives an
unreachable page, per alexbelgium's own analysis on #2978.
Add a second, dedicated nginx vhost (direct.conf) that proxies a fixed public
path (/filebrowser_quantum/) onto the same ingress-entry baseURL the existing
ingress vhost already targets, instead of changing the app's baseURL itself.
This leaves the ingress vhost, and therefore Ingress access, completely
unchanged -- only the new vhost is new surface area. config.yaml now
publishes the new vhost's internal port (8072) to host 8071, not the app's
own 8080 directly.
Co-authored-by: polmonta <polmonta05@gmail.com>
---------
Co-authored-by: polmonta <polmonta05@gmail.com>
Co-authored-by: alexbelgium <alexandre.pary@gmail.com>
175 lines
6.3 KiB
Bash
Executable File
175 lines
6.3 KiB
Bash
Executable File
#!/usr/bin/env bashio
|
|
# shellcheck shell=bash
|
|
set -e
|
|
|
|
############
|
|
# TIMEZONE #
|
|
############
|
|
|
|
if bashio::config.has_value 'TZ'; then
|
|
TIMEZONE=$(bashio::config 'TZ')
|
|
bashio::log.info "Setting timezone to $TIMEZONE"
|
|
if [ -f /usr/share/zoneinfo/"$TIMEZONE" ]; then
|
|
ln -snf /usr/share/zoneinfo/"$TIMEZONE" /etc/localtime
|
|
echo "$TIMEZONE" > /etc/timezone
|
|
else
|
|
bashio::log.fatal "$TIMEZONE not found, are you sure it is a valid timezone?"
|
|
fi
|
|
fi
|
|
|
|
###################
|
|
# SSL CONFIG v1.0 #
|
|
###################
|
|
|
|
bashio::config.require.ssl
|
|
if bashio::config.true 'ssl'; then
|
|
bashio::log.info "ssl enabled. If webui don't work, disable ssl or check your certificate paths"
|
|
#set variables
|
|
CERTFILE="/ssl/$(bashio::config 'certfile')"
|
|
KEYFILE="/ssl/$(bashio::config 'keyfile')"
|
|
else
|
|
CERTFILE=""
|
|
KEYFILE=""
|
|
fi
|
|
export CERTFILE KEYFILE
|
|
|
|
#################
|
|
# NGINX SETTING #
|
|
#################
|
|
|
|
#declare port
|
|
#declare certfile
|
|
declare ingress_interface
|
|
declare ingress_port
|
|
#declare keyfile
|
|
|
|
# The app's own baseURL is always the Supervisor ingress-entry path — this is
|
|
# unchanged from before. FileBrowser Quantum has no known "ignore baseURL for
|
|
# routing" leniency the way classic filebrowser's app does, so ingress access
|
|
# is left completely untouched here. Direct ip:port access is handled below by
|
|
# a second, separate nginx vhost (direct.conf) that rewrites a fixed public
|
|
# path onto this same ingress-entry baseURL, instead of changing the baseURL
|
|
# itself.
|
|
FB_BASEURL=$(bashio::addon.ingress_entry)
|
|
export FB_BASEURL
|
|
|
|
declare ADDON_PROTOCOL=http
|
|
# Generate Ingress configuration
|
|
if bashio::config.true 'ssl'; then
|
|
ADDON_PROTOCOL=https
|
|
fi
|
|
|
|
#port=$(bashio::addon.port 80)
|
|
ingress_port=$(bashio::addon.ingress_port)
|
|
ingress_interface=$(bashio::addon.ip_address)
|
|
sed -i "s|%%protocol%%|${ADDON_PROTOCOL}|g" /etc/nginx/servers/ingress.conf
|
|
sed -i "s|%%port%%|${ingress_port}|g" /etc/nginx/servers/ingress.conf
|
|
sed -i "s|%%interface%%|${ingress_interface}|g" /etc/nginx/servers/ingress.conf
|
|
sed -i "s|%%subpath%%|${FB_BASEURL}/|g" /etc/nginx/servers/ingress.conf
|
|
|
|
# --- Direct ip:port access (separate from ingress, see comment above) ---
|
|
# Publishes a second nginx vhost on a fixed internal port (published to the
|
|
# host as 8071 via config.yaml's `ports:`), at a fixed public path
|
|
# (/filebrowser_quantum/), that proxies to the same backend the ingress vhost
|
|
# uses. This keeps the app's own baseURL, and therefore ingress, unchanged.
|
|
sed -i "s|%%protocol%%|${ADDON_PROTOCOL}|g" /etc/nginx/servers/direct.conf
|
|
sed -i "s|%%subpath%%|${FB_BASEURL}/|g" /etc/nginx/servers/direct.conf
|
|
|
|
mkdir -p /var/log/nginx && touch /var/log/nginx/error.log
|
|
|
|
############################
|
|
# FILEBROWSER CONFIGURATION #
|
|
############################
|
|
|
|
mkdir -p /config /cache
|
|
|
|
# Copy default config if not existing
|
|
if [ ! -f "$FILEBROWSER_CONFIG" ]; then
|
|
cp /home/filebrowser/data/config.yaml "$FILEBROWSER_CONFIG"
|
|
fi
|
|
|
|
bashio::log.info "Updating FileBrowser config..."
|
|
|
|
# --- Server (hardcoded values) ---
|
|
bashio::log.info "... set server"
|
|
yq e -i ".server.port = 8080" "$FILEBROWSER_CONFIG"
|
|
yq e -i ".server.listen = \"0.0.0.0\"" "$FILEBROWSER_CONFIG"
|
|
yq e -i ".server.database = \"/config/database.db\"" "$FILEBROWSER_CONFIG"
|
|
yq e -i ".server.cacheDir = \"/cache\"" "$FILEBROWSER_CONFIG"
|
|
|
|
# --- Default user scope / source path ---
|
|
bashio::log.info "... set default user scope"
|
|
DEFAULT_USER_SCOPE=$(bashio::config 'default_user_scope' '/')
|
|
|
|
# Validate: must start with /
|
|
if [[ "$DEFAULT_USER_SCOPE" != /* ]]; then
|
|
bashio::log.fatal "default_user_scope '${DEFAULT_USER_SCOPE}' is not a valid absolute path (must start with /). Stopping."
|
|
exit 1
|
|
fi
|
|
|
|
# Validate: path must exist
|
|
if [ ! -d "$DEFAULT_USER_SCOPE" ]; then
|
|
bashio::log.fatal "default_user_scope '${DEFAULT_USER_SCOPE}' does not exist or is not a directory. Stopping."
|
|
exit 1
|
|
fi
|
|
|
|
bashio::log.info "... set source path and defaultUserScope to ${DEFAULT_USER_SCOPE}"
|
|
yq e -i ".server.sources[0].path = \"${DEFAULT_USER_SCOPE}\"" "$FILEBROWSER_CONFIG"
|
|
yq e -i ".server.sources[0].name = \"Default\"" "$FILEBROWSER_CONFIG"
|
|
yq e -i ".server.sources[0].config.defaultUserScope = \"${DEFAULT_USER_SCOPE}\"" "$FILEBROWSER_CONFIG"
|
|
|
|
# --- Base URL (from env or config) ---
|
|
bashio::log.info "... set base URL to allow ingress"
|
|
BASE_URL=$(bashio::config 'base_url' "${FB_BASEURL:-/}")
|
|
yq e -i ".server.baseURL = \"${BASE_URL}\"" "$FILEBROWSER_CONFIG"
|
|
|
|
# --- Auth method ---
|
|
AUTH_METHOD=$(bashio::config 'auth_method' 'password')
|
|
bashio::log.info "... authentication method set to $AUTH_METHOD"
|
|
case "$AUTH_METHOD" in
|
|
noauth)
|
|
yq e -i ".auth.methods.noauth = true" "$FILEBROWSER_CONFIG"
|
|
yq e -i ".auth.methods.password.enabled = false" "$FILEBROWSER_CONFIG"
|
|
yq e -i ".auth.methods.proxy.enabled = false" "$FILEBROWSER_CONFIG"
|
|
yq e -i ".auth.methods.oidc.enabled = false" "$FILEBROWSER_CONFIG"
|
|
;;
|
|
password)
|
|
yq e -i ".auth.methods.noauth = false" "$FILEBROWSER_CONFIG"
|
|
yq e -i ".auth.methods.password.enabled = true" "$FILEBROWSER_CONFIG"
|
|
yq e -i ".auth.methods.proxy.enabled = false" "$FILEBROWSER_CONFIG"
|
|
yq e -i ".auth.methods.oidc.enabled = false" "$FILEBROWSER_CONFIG"
|
|
;;
|
|
proxy)
|
|
yq e -i ".auth.methods.noauth = false" "$FILEBROWSER_CONFIG"
|
|
yq e -i ".auth.methods.password.enabled = false" "$FILEBROWSER_CONFIG"
|
|
yq e -i ".auth.methods.proxy.enabled = true" "$FILEBROWSER_CONFIG"
|
|
yq e -i ".auth.methods.oidc.enabled = false" "$FILEBROWSER_CONFIG"
|
|
;;
|
|
oidc)
|
|
yq e -i ".auth.methods.noauth = false" "$FILEBROWSER_CONFIG"
|
|
yq e -i ".auth.methods.password.enabled = false" "$FILEBROWSER_CONFIG"
|
|
yq e -i ".auth.methods.proxy.enabled = false" "$FILEBROWSER_CONFIG"
|
|
yq e -i ".auth.methods.oidc.enabled = true" "$FILEBROWSER_CONFIG"
|
|
;;
|
|
*)
|
|
bashio::log.fatal "Unknown auth_method: $AUTH_METHOD"
|
|
;;
|
|
esac
|
|
|
|
######################
|
|
# LAUNCH FILEBROWSER #
|
|
######################
|
|
|
|
# Prevent conflicts
|
|
for folders in /etc/services.d /etc/s6-overlay; do
|
|
[[ -d "$folders" ]] && rm -r "$folders"
|
|
done
|
|
|
|
bashio::log.info "Starting..."
|
|
|
|
cd /home/filebrowser
|
|
./filebrowser &
|
|
bashio::net.wait_for 8080 localhost 900 || true
|
|
bashio::log.info "Started !"
|
|
nginx || bashio::log.fatal "Nginx failed"
|