input
Environment Variables
The preferred configuration method is to use config.yaml. However, environment variables are available for secrets, config override, and developer purposes.
v2.0.0 behavior change
Database env vars changed between major versions:
FILEBROWSER_DATABASE— v1.x.x onlyFILEBROWSER_DATABASE_PATH— v2.0.0+
When upgrading, rename FILEBROWSER_DATABASE → FILEBROWSER_DATABASE_PATH and point it at your new SQLite file. See v2 migration guide.
Available Variables
| Variable | Config Equivalent | Description |
|---|---|---|
FILEBROWSER_CONFIG | - | Config file path when no CLI argument provided |
FILEBROWSER_DATABASE | server.database | v1.x.x only. BoltDB database file path (e.g. database.db). Removed in v2.0.0 — use FILEBROWSER_DATABASE_PATH instead. |
FILEBROWSER_DATABASE_PATH | server.database.path | v2.0.0+. SQLite path used when server.database.path is empty (application default: filebrowser.sqlite). Official Docker images set this to /home/filebrowser/data/database.sqlite. A path in config is not overridden by this variable. |
FILEBROWSER_ADMIN_PASSWORD | auth.methods.password.adminPassword | Password admin password |
FILEBROWSER_ONLYOFFICE_SECRET | integrations.office.secret | OnlyOffice JWT secret |
FILEBROWSER_FFMPEG_PATH | integrations.media.ffmpegPath | Path to FFmpeg binaries |
FILEBROWSER_OIDC_CLIENT_ID | auth.methods.oidc.clientId | OIDC client ID |
FILEBROWSER_OIDC_CLIENT_SECRET | auth.methods.oidc.clientSecret | OIDC client secret |
FILEBROWSER_JWT_TOKEN_SECRET | auth.key | JWT signing key |
FILEBROWSER_TOTP_SECRET | auth.totpSecret | TOTP encryption secret |
FILEBROWSER_RECAPTCHA_SECRET | auth.methods.password.recaptcha.secret | reCAPTCHA secret key |
FILEBROWSER_LDAP_USER_PASSWORD | auth.methods.ldap.userPassword | LDAP bind (service account) password. Same on v1.5.x stable and v2.x beta. |
FILEBROWSER_DISABLE_AUTOMATIC_BACKUP | N/A | Disable automatic backup |
Usage Example
Docker Compose:
CLI: