hassio-addons/filebrowser_quantum/rootfs/etc/nginx/servers/direct.conf

# FileBrowser trusts X-Forwarded-For (http.trustProxyHeaders) for login rate
# limits: keep the chain from the Supervisor ingress proxy, but replace
# whatever a client sends straight to the published port
map $server_port $fb_forwarded_for {
    8072    $remote_addr;
    default $proxy_add_x_forwarded_for;
}

server {
    listen 0.0.0.0:8072 default_server;

    include /etc/nginx/includes/server_params.conf;
    include /etc/nginx/includes/proxy_params.conf;

    client_max_body_size 0;

    # nginx listens on 8072 inside the container but is published to the host
    # as 8071. An absolute redirect would be built from $server_port and send
    # the browser to :8072, which is not published and therefore unreachable.
    absolute_redirect off;

    # FileBrowser serves under its baseURL (the Supervisor ingress entry) and
    # emits that prefix as absolute links in its HTML/JS, so the browser must
    # use that same path here. The bare root and the two legacy paths below
    # redirect to it; every other request is proxied through untouched, which
    # keeps asset, API and websocket URLs working without response rewriting.
    location = / {
        return 302 %%subpath%%;
    }

    # 1.5.1.1 briefly documented /filebrowser_quantum/ as the direct URL. The
    # app never served that path itself, so send those bookmarks on instead of
    # letting them fall through to a 404.
    location = /filebrowser_quantum {
        return 302 %%subpath%%;
    }

    location = /filebrowser_quantum/ {
        return 302 %%subpath%%;
    }

    location / {
        proxy_connect_timeout 30m;
        proxy_send_timeout 30m;
        proxy_read_timeout 30m;
        proxy_pass         %%protocol%%://backend;
    }
}