overthinkos/filebrowser
filebrowser/skills/filebrowser/SKILL.md
FileBrowser Quantum web file manager with Tailscale tunnel. MUST be invoked before building, deploying, configuring, or troubleshooting the filebrowser box.
development
Updated Jun 11, 2026
$ install --global
skillsauthnpx skillsauth add overthinkos/overthink-plugins filebrowserInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 11, 2026, 7:12 AM389.1s1 file scanned
SKILL.md
- name:
- filebrowser
- description:
- |
filebrowser
Web file manager accessible via Tailscale private tunnel.
Box Properties
| Property | Value | |----------|-------| | Base | fedora | | Candies | agent-forwarding, filebrowser, dbus, charly | | Platforms | linux/amd64 | | Ports | 8085:8080 | | Tunnel | tailscale (private: all) | | Registry | ghcr.io/overthinkos |
Full Candy Stack
fedora(base)pixi->python->supervisord(transitive)agent-forwarding-- SSH/GPG agent forwardingfilebrowser-- web file manager, data + files volumesdbus-- D-Bus session buscharly-- charly CLI inside container
Ports
| Port | Service | Protocol | |------|---------|----------| | 8085 (host) -> 8080 (container) | FileBrowser | HTTP |
Volumes
| Name | Path | Purpose | |------|------|---------| | data | ~/.filebrowser/data | Database (SQLite) and cache | | files | ~/.filebrowser/files | User-accessible files (bind-mount target) |
Quick Start
charly box build filebrowser
charly config filebrowser --bind files=~/Documents
charly start filebrowser
# Access at http://localhost:8085
# Tailscale: https://<hostname>:8085
# Default login: admin / admin
Bind Mount Examples
# Browse home directory
charly config filebrowser --bind files=~/
# Browse NAS mount
charly config filebrowser --bind files=/mnt/nas/shared
# Browse specific project
charly config filebrowser --bind files=~/projects
Host Alias
charly alias install filebrowser
# Now: filebrowser (runs inside the container)
Key Candies
/charly-filebrowser:filebrowser-- FileBrowser Quantum service, config, volumes/charly-distros:agent-forwarding-- SSH/GPG agent forwarding/charly-infrastructure:dbus-layer-- D-Bus session bus/charly-tools:charly-- charly CLI for in-container management
Related Boxes
/charly-distros:fedora-- parent base image/charly-ollama:ollama-- similar simple service pattern
Verification
After charly start:
charly status filebrowser-- container runningcurl -s http://localhost:8085-- web UI responds (HTTP 200)curl -s http://localhost:8085/health--{"message":"ok"}- Tailscale:
https://<hostname>:8085from any tailnet device
Test Coverage
Latest charly eval live filebrowser run: 24 passed, 0 failed, 0 skipped.
All tests embedded in the ai.opencharly.eval OCI label, covering
agent-forwarding prerequisites (gpg, ssh, direnv binaries), supervisord
- dbus daemon + charly binary presence, filebrowser binary + config, and
deploy-scope: service up, port reachable on
127.0.0.1:${HOST_PORT:8080}, HTTP 200 on/, data volume mounted.
See /charly-eval:eval for the framework and author-facing gotchas.
Related Skills
/charly-filebrowser:filebrowser— candy authoring/charly-eval:eval— declarative testing framework/charly-core:charly-config— deploy-mode setup with volume backing and tunnels/charly-build:build— LABELs-at-end cache efficiency
When to Use This Skill
MUST be invoked when the task involves the filebrowser box, web file management deployment, or the FileBrowser Quantum service. Invoke this skill BEFORE reading source code or launching Explore agents.
Related
/charly-image:image— image family umbrella (box:entries incharly.yml, build/validate/inspect/list)
Related Skills
overthinkos/charly
tools
VerifiedTrustedCommunity
OpenCharly CLI (charly) binary installed into container/VM images for in-container use. Use when working with charly binary deployment inside containers, native D-Bus support, or the full charly toolchain (charly binary + virtualization + gocryptfs + socat).
SKILL.mdUpdated Jun 10, 2026
overthinkos/charly-cachyos
development
VerifiedTrustedCommunity
Operator CachyOS workstation profile — a kind:local template + target:local deploy that installs the full dev stack (30 candies) onto a CachyOS host via ShellExecutor. Lives in the overthinkos/cachyos submodule. MUST be invoked before editing or applying the charly-cachyos workstation profile.
SKILL.mdUpdated Jun 10, 2026
overthinkos/charly-fedora
tools
VerifiedTrustedCommunity
Fedora box with the full charly toolchain using shared candies. Rootless-first — runs as uid=1000 with passwordless sudo (no root, no cap_add: ALL). Same candy list as charly-arch. Includes NVIDIA GPU runtime. MUST be invoked before building, deploying, configuring, or troubleshooting the charly-fedora box.
SKILL.mdUpdated Jun 10, 2026
overthinkos/charly-arch
tools
VerifiedTrustedCommunity
Arch Linux box with the full charly toolchain. Rootless-first — runs as uid=1000 with passwordless sudo (no root, no cap_add: ALL). Composes /charly-coder:charly-mcp so the box is reachable as an MCP gateway on port 18765. NVIDIA GPU runtime composed in. MUST be invoked before building, deploying, configuring, or troubleshooting the charly-arch box.
SKILL.mdUpdated Jun 10, 2026