overthinkos/filebrowser
ov-filebrowser/skills/filebrowser/SKILL.md
FileBrowser Quantum web file manager with Tailscale tunnel. MUST be invoked before building, deploying, configuring, or troubleshooting the filebrowser image.
development
Updated May 6, 2026
$ install --global
skillsauthnpx skillsauth add overthinkos/overthink-plugins filebrowserInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 6, 2026, 6:44 AM113.3s1 file scanned
SKILL.md
- name:
- filebrowser
- description:
- |
filebrowser
Web file manager accessible via Tailscale private tunnel.
Image Properties
| Property | Value | |----------|-------| | Base | fedora | | Layers | agent-forwarding, filebrowser, dbus, ov | | Platforms | linux/amd64 | | Ports | 8085:8080 | | Tunnel | tailscale (private: all) | | Registry | ghcr.io/overthinkos |
Full Layer Stack
fedora(base)pixi->python->supervisord(transitive)agent-forwarding-- SSH/GPG agent forwardingfilebrowser-- web file manager, data + files volumesdbus-- D-Bus session busov-- ov CLI inside container
Ports
| Port | Service | Protocol | |------|---------|----------| | 8085 (host) -> 8080 (container) | FileBrowser | HTTP |
Volumes
| Name | Path | Purpose | |------|------|---------| | data | ~/.filebrowser/data | Database (SQLite) and cache | | files | ~/.filebrowser/files | User-accessible files (bind-mount target) |
Quick Start
ov image build filebrowser
ov config filebrowser --bind files=~/Documents
ov start filebrowser
# Access at http://localhost:8085
# Tailscale: https://<hostname>:8085
# Default login: admin / admin
Bind Mount Examples
# Browse home directory
ov config filebrowser --bind files=~/
# Browse NAS mount
ov config filebrowser --bind files=/mnt/nas/shared
# Browse specific project
ov config filebrowser --bind files=~/projects
Host Alias
ov alias install filebrowser
# Now: filebrowser (runs inside the container)
Key Layers
/ov-filebrowser:filebrowser-- FileBrowser Quantum service, config, volumes/ov-foundation:agent-forwarding-- SSH/GPG agent forwarding/ov-foundation:dbus-- D-Bus session bus/ov-foundation:ov-- ov CLI for in-container management
Related Images
/ov-foundation:fedora-- parent base image/ov-ollama:ollama-- similar simple service pattern
Verification
After ov start:
ov status filebrowser-- container runningcurl -s http://localhost:8085-- web UI responds (HTTP 200)curl -s http://localhost:8085/health--{"message":"ok"}- Tailscale:
https://<hostname>:8085from any tailnet device
Test Coverage
Latest ov eval live filebrowser run: 24 passed, 0 failed, 0 skipped.
All tests embedded in the org.overthinkos.eval OCI label, covering
agent-forwarding prerequisites (gpg, ssh, direnv binaries), supervisord
- dbus daemon + ov binary presence, filebrowser binary + config, and
deploy-scope: service up, port reachable on
127.0.0.1:${HOST_PORT:8080}, HTTP 200 on/, data volume mounted.
See /ov-build:eval for the framework and author-facing gotchas.
Related Skills
/ov-filebrowser:filebrowser— layer authoring/ov-build:eval— declarative testing framework/ov-core:config— deploy-mode setup with volume backing and tunnels/ov-build:build— LABELs-at-end cache efficiency
When to Use This Skill
MUST be invoked when the task involves the filebrowser image, web file management deployment, or the FileBrowser Quantum service. Invoke this skill BEFORE reading source code or launching Explore agents.
Related
/ov-build:image— image family umbrella (image:entries inoverthink.yml, build/validate/inspect/list)
Related Skills
overthinkos/plugin
tools
VerifiedTrustedCommunity
Use when authoring or modifying a charly PLUGIN — a candy with a `plugin:` block that contributes Providers (verbs/kinds/deploy-targets/steps/builders/commands), its own CUE schema, builtin (compiled-in) or external (out-of-tree git repo). Covers the unified Provider model, the per-plugin CUE-schema contract (single source → Go params for dev + schema-over-Describe RPC for runtime), the SDK, and the loader.
SKILL.mdUpdated Jun 22, 2026
overthinkos/cue
tools
VerifiedTrustedCommunity
The CUE data-validation / configuration CLI (cue), pinned to v0.16.1. Use when working with the cue candy, installing the cue binary into a box or onto a target:local dev host, or running the offline schema-vendoring pipeline that feeds charly's egress validation.
SKILL.mdUpdated Jun 16, 2026
overthinkos/egress
tools
VerifiedTrustedCommunity
CUE EGRESS validation — validating (and, where it adds value, generating) the config files charly WRITES to a system BEFORE the bytes hit disk. MUST be invoked before working on charly/egress.go, the vendored schemas under candy/plugin-egress/egress-schemas/vendor/, the ValidateEgress / registerVendoredEgressKind path, the offline `task cue:vendor` pipeline, or adding an egress schema for any written artifact (cloud-init, k8s manifests, traefik routes, runtime config, install ledger, systemd/quadlet units, ssh_config, libvirt XML).
SKILL.mdUpdated Jun 16, 2026
overthinkos/check-k8s
tools
VerifiedTrustedCommunity
Kubernetes cluster-probe declarative check verb — the `kube:` check verb (nodes, pods, ingress, storage class, addon health, apply/delete, and arbitrary resource GETs) served out-of-process by the candy/plugin-kube plugin (vendored client-go; no external kubectl required).
SKILL.mdUpdated Jun 14, 2026