App Information

• files.web.kueber.eu

Filebrowser

A web-based file manager for browsing and managing files on your server.

About

Filebrowser is a lightweight, self-hosted file manager that provides a clean web UI to upload, download, manage, and share files stored on your server. It supports multiple users with scoped path access and shareable links. Self-hosting gives full control over your files without depending on cloud storage services.

AlternativeTo

Cloud Hosted

Tool	Open Source	Free Tier	Monthly Cost
Dropbox	No	Limited	From $9.99/mo
Google Drive	No	Limited	From $2.99/mo

Self Hosted

Tool	Open Source	Full Features	Notes
Nextcloud	Yes	Yes	Full collaboration suite, much heavier

Installation

Architecture

• Deployment: Single filebrowser deployment in the filebrowser namespace
• Image: filebrowser/filebrowser:v2.63.1 (digest-pinned)
• Storage: Longhorn PVC for app config (encrypted); multiple NFS PersistentVolumes for file access
• Networking: ClusterIP service on port 80; two HTTPRoutes — one OIDC-gated, one open for /share links

Security

• Runs as runAsUser: 1000, runAsNonRoot: true, allowPrivilegeEscalation: false, capabilities dropped
• OIDC enforced via Envoy Gateway SecurityPolicy; /share path bypasses OIDC for public links
• Longhorn config PVC encrypted at rest; Keycloak CA cert mounted as ConfigMap for TLS verification

Updates

Managed by Renovate. Image is digest-pinned.

Data Management

• PVC: Longhorn-encrypted PVC for app config and database (FB_DATABASE)
• NFS: Multiple NFS PersistentVolumes mounted read-write for file browsing
• Backups: No k8up schedule present.

User Management

OIDC enforced via Envoy Gateway SecurityPolicy (filebrowser-oidc-policy). Provider is Keycloak. Admin password also available from SOPS secret for initial setup.

Configuration Management

• Admin password (FB_PASSWORD) and database path from SOPS-encrypted secret
• Keycloak CA certificate from ConfigMap (keycloak-ca)
• OIDC policy configured via Envoy Gateway SecurityPolicy resource

Administration

Usage

Browse, upload, and download files across all mounted NFS shares via the web UI. Create user accounts with access scoped to specific paths. Generate shareable links for external access to individual files or directories.

Metadata

Kubernetes Metadata

• Image: filebrowser/filebrowser:v2.63.2@sha256:4dce87308b9f9cfbcf8d0a284fc9565d2b515530a6bae2d920b388161e093f26