Make sure /ro and other resources are protected (#248 )

Update version
Update caddyfile
2026-08-09 13:26:07 +10:00 · 2025-03-07 17:22:10 +11:00 · 2025-03-07 04:57:32 +00:00 · 2025-03-07 15:21:33 +11:00 · 2025-03-07 14:41:32 +11:00 · 2025-03-07 02:57:50 +00:00
6 changed files with 25 additions and 5 deletions
@@ -1 +1 @@
-6.1.4
+6.2.1
@@ -27,7 +27,9 @@ route /files/* {
 route /ro/* {
 	uri strip_prefix /ro
 	root * /data
-	file_server browse
+	file_server {
+		browse "{$CADDY_FILE_SERVER_BROWSE_HTML}"
+	}
 }

 route /ping {
@@ -41,6 +41,7 @@ ENV RCLONE_AUTO_UPLOAD_REMOTE_PATH=/downloads
 ENV RCLONE_AUTO_UPLOAD_FILE_MIN_SIZE=1K
 ENV RCLONE_AUTO_UPLOAD_FILE_MAX_SIZE=100G
 ENV FIX_DATA_VOLUME_PERMISSIONS=false
+ENV CADDY_FILE_SERVER_BROWSE_HTML=/app/browse.html

 ADD install.sh aria2c.sh caddy.sh filebrowser.sh Procfile init.sh start.sh rclone.sh new-version-checker.sh APP_VERSION /app/
 ADD conf /app/conf
@@ -5,7 +5,9 @@

 :PORT

-basicauth / {
+@protected path / /index.html /css/* /js/* /ro /ro/* /jsonrpc
+
+basicauth @protected {
 	ARIA2_USER ARIA2_PWD_ENCRYPT
 }

@@ -13,6 +15,7 @@ redir /ui / 301
 redir /ui/ / 301
 redir /rclone /rclone/ 301
 redir /files /files/ 301
+redir /ro /ro/ 301

 reverse_proxy /jsonrpc 127.0.0.1:6800

@@ -26,6 +29,14 @@ route /files/* {
 	reverse_proxy 127.0.0.1:8080
 }

+route /ro/* {
+	uri strip_prefix /ro
+	root * /data
+	file_server {
+		browse "{$CADDY_FILE_SERVER_BROWSE_HTML}"
+	}
+}
+
 route /ping {
 	respond "app version: {env.APP_VERSION}"
 }
@@ -5,7 +5,9 @@ log {
 	output stderr
 }

-basicauth / {
+@protected path / /index.html /css/* /js/* /ro /ro/* /jsonrpc
+
+basicauth @protected {
 	ARIA2_USER ARIA2_PWD_ENCRYPT
 }

@@ -13,6 +15,7 @@ redir /ui / 301
 redir /ui/ / 301
 redir /rclone /rclone/ 301
 redir /files /files/ 301
+redir /ro /ro/ 301

 reverse_proxy /rpc 127.0.0.1:6800
 reverse_proxy /jsonrpc 127.0.0.1:6800
@@ -30,7 +33,9 @@ route /files/* {
 route /ro/* {
 	uri strip_prefix /ro
 	root * /data
-	file_server browse
+	file_server {
+		browse "{$CADDY_FILE_SERVER_BROWSE_HTML}"
+	}
 }

 route /ping {
@@ -42,6 +42,7 @@ groupadd junv \
  && tar -zxf ${caddy_file} \
  && mv caddy /usr/local/bin/ \
  && rm -rf ${caddy_file} \
+  && wget -P /app -N https://raw.githubusercontent.com/glowinthedark/caddy-file-server-browse-extension/39e997c91539d0f04fcce53a3cb6605b2ae9e50c/browse.html \
  && platform=linux-amd64 \
  && wget -N https://github.com/filebrowser/filebrowser/releases/download/${filebrowser_version}/${filebrowser_file} \
  && tar -zxf ${filebrowser_file} \
Author	SHA1	Message	Date
junvandGitHub	4a0bb9446f	Make sure /ro and other resources are protected (#248 )	2025-03-07 17:22:10 +11:00
junv-repo-bot	85e11866c1	Update version	2025-03-07 04:57:32 +00:00
junv	9a74f672b0	Update caddyfile	2025-03-07 15:21:33 +11:00
junvandGitHub	e308b67902	use https://github.com/glowinthedark/caddy-file-server-browse-extension to enhance caddy file server user experience (#247 )	2025-03-07 14:41:32 +11:00
junv-repo-bot	9ac63aef85	Update version	2025-03-07 02:57:50 +00:00
@@ -1 +1 @@
 .1.4
 .2.1