2025-07-11 02:22:58 +00:00
318 changed files with 14860 additions and 119796 deletions
--- a/.dockerignore
+++ b/.dockerignore
@ -1,7 +1,5 @@
-.venv
+*
-dist
+!docker/*
-.idea
+!healthcheck.sh
-frontend/node_modules
+!docker_config.json
-frontend/dist
+!filebrowser
 filebrowser.db
 docs/index.md
--- a/.github/CODEOWNERS
+++ b/.github/CODEOWNERS
@ -2,4 +2,4 @@
 # Unless a later match takes precedence, @o1egl will be requested for
 # review when someone opens a pull request.
-*       @o1egl @hacdias
+*       @o1egl
--- a/.github/ISSUE_TEMPLATE/bug_report.md
+++ b/.github/ISSUE_TEMPLATE/bug_report.md
@ -0,0 +1,22 @@
 ---
 name: Bug report
 about: Create a report to help us improve
 ---
 **Description**
 <!-- A clear and concise description of what the issue is about. What are you trying to do? -->
 **Expected behaviour**
 <!-- What did you expect to happen? -->
 **What is happening instead?**
 <!-- Please, give full error messages and/or log. -->
 **Additional context**
 <!-- Add any other context about the problem here. If applicable, add screenshots to help explain your problem. -->
 **How to reproduce?**
 <!-- Tell us how to reproduce this issue. How can someone who is starting from scratch reproduce this behaviour as minimally as possible? -->
 **Files**
 <!-- A list of relevant files for this issue. Large files can be uploaded one-by-one or in a tarball/zipfile. -->
--- a/.github/ISSUE_TEMPLATE/bug_report.yml
+++ b/.github/ISSUE_TEMPLATE/bug_report.yml
@ -1,53 +0,0 @@
 name: Bug Report
 description: Report a bug in FileBrowser.
 labels: [bug, triage]
 body:
  - type: checkboxes
    attributes:
      label: Checklist
      description: Please verify that you've followed these steps
      options:
        - label: This is a bug report, not a question.
          required: true
        - label: I have searched on the [issue tracker](https://github.com/filebrowser/filebrowser/issues?q=is%3Aissue) for my bug.
          required: true
        - label: I am running the latest [FileBrowser version](https://github.com/filebrowser/filebrowser/releases) or have an issue updating.
          required: true
  - type: textarea
    id: version
    attributes:
      label: Version
      render: Text
      description: |
        Enter the version of FileBrowser you are using.
    validations:
      required: true
  - type: textarea
    attributes:
      label: Description
      description: |
        A clear and concise description of what the issue is about. What are you trying to do?
    validations:
      required: true
  - type: textarea
    attributes:
      label: What did you expect to happen?
    validations:
      required: true
  - type: textarea
    attributes:
      label: What actually happened?
    validations:
      required: true
  - type: textarea
    attributes:
      label: Reproduction Steps
      description: |
        Tell us how to reproduce this issue. How can someone who is starting from scratch reproduce this behavior as minimally as possible?
    validations:
      required: true
  - type: textarea
    attributes:
      label: Files
      description: |
        A list of relevant files for this issue. Large files can be uploaded one-by-one or in a tarball/zipfile.
--- a/.github/ISSUE_TEMPLATE/config.yml
+++ b/.github/ISSUE_TEMPLATE/config.yml
@ -1,5 +0,0 @@
 blank_issues_enabled: false
 contact_links:
  - name: GitHub Discussions
    url: https://github.com/filebrowser/filebrowser/discussions
    about: Please ask questions and discuss features here.
--- a/.github/ISSUE_TEMPLATE/feature_request.md
+++ b/.github/ISSUE_TEMPLATE/feature_request.md
@ -0,0 +1,16 @@
 ---
 name: Feature request
 about: Suggest an idea for this project
 ---
 **Is your feature request related to a problem? Please describe.**
 <!-- Add a clear and concise description of what the problem is. E.g. *I'm always frustrated when [...]* -->
 **Describe the solution you'd like**
 <!-- Add a clear and concise description of what you want to happen.  -->
 **Describe alternatives you've considered**
 <!-- Add a clear and concise description of any alternative solutions or features you've considered.  -->
 **Additional context**
 <!-- Add any other context or screenshots about the feature request here. -->
--- a/.github/PULL_REQUEST_TEMPLATE.md
+++ b/.github/PULL_REQUEST_TEMPLATE.md
@ -1,16 +1,19 @@
-## Description
+**Description**
 <!--
 Please explain the changes you made here.
 If the feature changes current behaviour, explain why your solution is better.
 -->
-<!-- Please explain the changes you made here. -->
+:rotating_light: Before submitting your PR, please indicate which issues are either fixed or closed by this PR. See [GitHub Help: Closing issues using keywords](https://help.github.com/articles/closing-issues-via-commit-messages/).
-## Additional Information
+- [ ] DO make sure you are requesting to **pull a topic/feature/bugfix branch** (right side). Don't request your master!
 - [ ] DO make sure you are making a pull request against the **master branch** (left side). Also you should start *your branch* off *our master*.
 - [ ] DO make sure that File Browser can be successfully built. See [builds](https://github.com/filebrowser/community/blob/master/builds.md) and [development](https://github.com/filebrowser/community/blob/master/development.md).
 - [ ] AVOID breaking the continuous integration build.
-<!-- If it is a relatively large or complex change, please add more information to explain what you did, how you did it, if you considered any alternatives, etc. -->
+**Further comments**
 <!--
 If this is a relatively large or complex change, kick off the discussion by explaining why you chose the solution you did, what alternatives you considered, etc.
-## Checklist
+:heart: Thank you!
-
+-->
 Before submitting your PR, please indicate which issues are either fixed or closed by this PR. See [GitHub Help: Closing issues using keywords](https://help.github.com/articles/closing-issues-via-commit-messages/).
 - [ ] I am aware the project is currently in maintenance-only mode. See [README](https://github.com/filebrowser/community/blob/master/README.md)
 - [ ] I am aware that translations MUST be made through [Transifex](https://app.transifex.com/file-browser/file-browser/) and that this PR is NOT a translation update
 - [ ] I am making a PR against the `master` branch.
 - [ ] I am sure File Browser can be successfully built. See [builds](https://github.com/filebrowser/community/blob/master/builds.md) and [development](https://github.com/filebrowser/community/blob/master/development.md).
--- a/.github/workflows/main.yaml
+++ b/.github/workflows/main.yaml
@ -3,25 +3,20 @@ name: main
 on:
  push:
    branches:
-      - "master"
+      - 'master'
    tags:
-      - "v*"
+      - 'v*'
  pull_request:
 jobs:
-  # linters
+# linters
  lint-frontend:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: pnpm/action-setup@v4
        with:
          package_json_file: "frontend/package.json"
      - uses: actions/setup-node@v4
        with:
-          node-version: "22.x"
+          node-version: '18'
          cache: "pnpm"
          cache-dependency-path: "frontend/pnpm-lock.yaml"
      - run: make lint-frontend
  lint-backend:
    runs-on: ubuntu-latest
@ -29,27 +24,32 @@ jobs:
      - uses: actions/checkout@v4
      - uses: actions/setup-go@v5
        with:
-          go-version: 1.23.0
+          go-version: 1.21.0
      - run: make lint-backend
  lint-commits:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - uses: actions/setup-node@v4
        with:
          node-version: '18'
      - run: make lint-commits
  lint:
    runs-on: ubuntu-latest
-    needs: [lint-frontend, lint-backend]
+    needs: [lint-frontend, lint-backend, lint-commits]
    steps:
      - run: echo "done"
-  # tests
+# tests
  test-frontend:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: pnpm/action-setup@v4
        with:
          package_json_file: "frontend/package.json"
      - uses: actions/setup-node@v4
        with:
-          node-version: "22.x"
+          node-version: '18'
          cache: "pnpm"
          cache-dependency-path: "frontend/pnpm-lock.yaml"
      - run: make test-frontend
  test-backend:
    runs-on: ubuntu-latest
@ -57,7 +57,7 @@ jobs:
      - uses: actions/checkout@v4
      - uses: actions/setup-go@v5
        with:
-          go-version: 1.23.0
+          go-version: 1.21.0
      - run: make test-backend
  test:
    runs-on: ubuntu-latest
@ -65,7 +65,7 @@ jobs:
    steps:
      - run: echo "done"
-  # release
+# release
  release:
    runs-on: ubuntu-latest
    needs: [lint, test]
@ -76,15 +76,10 @@ jobs:
          fetch-depth: 0
      - uses: actions/setup-go@v5
        with:
-          go-version: 1.23.0
+          go-version: 1.21.0
      - uses: pnpm/action-setup@v4
        with:
          package_json_file: "frontend/package.json"
      - uses: actions/setup-node@v4
        with:
-          node-version: "22.x"
+          node-version: '18'
          cache: "pnpm"
          cache-dependency-path: "frontend/pnpm-lock.yaml"
      - name: Set up QEMU
        uses: docker/setup-qemu-action@v1
      - name: Set up Docker Buildx
--- a/.github/workflows/pr-lint.yaml
+++ b/.github/workflows/pr-lint.yaml
@ -1,46 +0,0 @@
 name: "Lint PR"
 on:
  pull_request_target:
    types:
      - opened
      - reopened
      - edited
      - synchronize
 permissions:
  pull-requests: write
 jobs:
  main:
    name: Validate PR title
    runs-on: ubuntu-latest
    steps:
      - uses: amannn/action-semantic-pull-request@v5
        id: lint_pr_title
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      - uses: marocchino/sticky-pull-request-comment@v2
        # When the previous steps fails, the workflow would stop. By adding this
        # condition you can continue the execution with the populated error message.
        if: always() && (steps.lint_pr_title.outputs.error_message != null)
        with:
          header: pr-title-lint-error
          message: |
            Hey there and thank you for opening this pull request! 👋🏼
            We require pull request titles to follow the [Conventional Commits specification](https://www.conventionalcommits.org/en/v1.0.0/) and it looks like your proposed title needs to be adjusted.
            Details:
            ```
            ${{ steps.lint_pr_title.outputs.error_message }}
            ```
      # Delete a previous comment when the issue has been resolved
      - if: ${{ steps.lint_pr_title.outputs.error_message == null }}
        uses: marocchino/sticky-pull-request-comment@v2
        with:
          header: pr-title-lint-error
          delete: true
--- a/.github/workflows/site-pr.yml
+++ b/.github/workflows/site-pr.yml
@ -1,20 +0,0 @@
 name: Build Site
 on:
  pull_request:
    paths:
      - 'www'
      - '*.md'
 jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v2
      - name: Build site
        run: make site
--- a/.github/workflows/site-publish.yml
+++ b/.github/workflows/site-publish.yml
@ -1,32 +0,0 @@
 name: Build and Deploy Site
 on:
  push:
    branches:
      - master
 jobs:
  deploy:
    permissions:
      contents: read
      deployments: write
      pull-requests: write
    runs-on: ubuntu-latest
    timeout-minutes: 5
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v2
      - name: Build site
        run: make site
      - name: Deploy to Cloudflare Pages
        uses: cloudflare/wrangler-action@v3
        with:
          apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
          accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
          command: pages deploy www/public --project-name=${{ secrets.CLOUDFLARE_PROJECT_NAME }}
          gitHubToken: ${{ secrets.GITHUB_TOKEN }}
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@ -0,0 +1,24 @@
 name: 'Close stale issues and PRs'
 permissions:
  issues: write
  pull-requests: write
 on:
  schedule:
    - cron: '30 1 * * *'
 jobs:
  stale:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/stale@v5
        with:
          stale-pr-message: 'This PR is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 5 days.'
          close-pr-message: 'This PR was closed because it has been stalled for 5 days with no activity.'
          stale-issue-message: 'This issue is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 5 days.'
          close-issue-message: 'This issue was closed because it has been stalled for 5 days with no activity.'
          days-before-stale: 30
          days-before-close: 5
          exempt-issue-labels: 'feature ☘,enhancement ⚙,bug 🐞'
          exempt-pr-labels: 'need-help,wip'
          operations-per-run: 100
--- a/.gitignore
+++ b/.gitignore
@ -6,7 +6,6 @@ rice-box.go
 /filebrowser
 /filebrowser.exe
 /dist
 .venv
 .DS_Store
 node_modules
@ -31,14 +30,5 @@ yarn-error.log*
 bin/
 build/
 # Vue distributable files
 /frontend/dist/*
 !/frontend/dist/.gitkeep
 # Playwright files
 /frontend/test-results/
 /frontend/playwright-report/
 /frontend/playwright/.cache/
 default.nix
 Dockerfile.dev
--- a/.golangci.yml
+++ b/.golangci.yml
@ -1,132 +1,120 @@
-version: "2"
+linters-settings:
  dupl:
    threshold: 100
  exhaustive:
    default-signifies-exhaustive: false
  funlen:
    lines: 100
    statements: 50
  gci:
    local-prefixes: github.com/filebrowser/filebrowser
  goconst:
    min-len: 2
    min-occurrences: 2
  gocritic:
    enabled-tags:
      - diagnostic
      - experimental
      - opinionated
      - performance
      - style
    disabled-checks:
      - dupImport # https://github.com/go-critic/go-critic/issues/845
      - ifElseChain
      - octalLiteral
      - whyNoLint
      - wrapperFunc
  gocyclo:
    min-complexity: 15
  goimports:
    local-prefixes: github.com/filebrowser/filebrowser
  gomnd:
    settings:
      mnd:
        # don't include the "operation" and "assign"
        checks: argument,case,condition,return
  govet:
    check-shadowing: true
  lll:
    line-length: 140
  maligned:
    suggest-new: true
  misspell:
    locale: US
  nolintlint:
    allow-leading-space: true # don't require machine-readable nolint directives (i.e. with no leading space)
    allow-unused: false # report any unused nolint directives
    require-explanation: false # don't require an explanation for nolint directives
    require-specific: false # don't require nolint directives to be specific about which linter is being skipped
 linters:
-  # inverted configuration with `default: all` and `disable` is not scalable during updates of golangci-lint
+  # please, do not use `enable-all`: it's deprecated and will be removed soon.
-  default: none
+  # inverted configuration with `enable-all` and `disable` is not scalable during updates of golangci-lint
  disable-all: true
  enable:
    - bodyclose
    - deadcode
    - dogsled
    - dupl
    - errcheck
-    - errorlint
+    - exportloopref
    - exhaustive
    - funlen
    - gocheckcompilerdirectives
    - gochecknoinits
    - goconst
    - gocritic
    - gocyclo
-    - godox
+    - goimports
    - gomnd
    - goprintffuncname
    - gosec
    - gosimple
    - govet
    - ineffassign
    - lll
    - misspell
    - mnd
    - nakedret
    - nolintlint
    - prealloc
    - revive
    - rowserrcheck
    - staticcheck
-    - testifylint
+    - structcheck
    - stylecheck
    - typecheck
    - unconvert
    - unparam
    - unused
    - varcheck
    - whitespace
-  settings:
+    - prealloc
    dupl:
      threshold: 100
    exhaustive:
      default-signifies-exhaustive: false
    funlen:
      lines: 100
      statements: 50
    gocritic:
      disabled-checks:
        - dupImport # https://github.com/go-critic/go-critic/issues/845
        - ifElseChain
        - octalLiteral
        - whyNoLint
        - wrapperFunc
      enabled-tags:
        - diagnostic
        - experimental
        - opinionated
        - performance
        - style
    gocyclo:
      min-complexity: 15
    govet:
      enable:
        - nilness
        - shadow
    lll:
      line-length: 140
    misspell:
      locale: US
    mnd:
      # don't include the "operation" and "assign"
      checks:
        - argument
        - case
        - condition
        - return
      ignored-numbers:
        - "0"
        - "1"
        - "2"
        - "3"
        - "0666"
        - "0700"
        - "0700"
      ignored-functions:
        - strings.SplitN
        - make
    nolintlint:
      allow-unused: false # report any unused nolint directives
      require-explanation: false # require an explanation for nolint directives
      require-specific: true # require nolint directives to be specific about which linter is being skipped
    staticcheck:
      checks:
        - "all"
        - "-QF*"
  exclusions:
    generated: lax
    presets:
      - comments
      - common-false-positives
      - legacy
      - std-error-handling
    rules:
      - linters:
          - gochecknoinits
        path: cmd/.*.go
      - linters:
          - dupl
          - funlen
          - gochecknoinits
          - gocyclo
          - lll
          - scopelint
        path: .*_test.go
      - linters:
          - misspell
        text: "[aA]uther"
      - linters:
          - mnd
        text: strconv.Parse
    paths:
      - frontend/
-formatters:
+issues:
-  enable:
+  exclude-rules:
-    - goimports
+    - path: cmd/.*.go
-  settings:
+      linters:
-    goimports:
+        - gochecknoinits
-      local-prefixes:
+    - path: .*_test.go
-        - github.com/filebrowser/filebrowser
+      linters:
-  exclusions:
+        - lll
-    generated: lax
+        - gochecknoinits
-    paths:
+        - gocyclo
-      - frontend/
+        - funlen
        - dupl
        - scopelint
    - text: "Auther"
      linters:
        - misspell
    - text: "strconv.Parse"
      linters:
        - gomnd
 run:
  go: '1.18'
  skip-dirs:
    - frontend/
  skip-files:
    - http/rice-box.go
 # golangci.com configuration
 # https://github.com/golangci/golangci/wiki/Configuration
 service:
  golangci-lint-version: 1.27.x # use the fixed version to not introduce new linters unexpectedly
--- a/.goreleaser.yml
+++ b/.goreleaser.yml
@ -1,5 +1,3 @@
 version: 2
 project_name: filebrowser
 env:
@ -19,30 +17,31 @@ builds:
      - freebsd
    goarch:
      - amd64
-      - "386"
+      - 386
      - arm
      - arm64
      - riscv64
    goarm:
-      - "5"
+      - 5
-      - "6"
+      - 6
-      - "7"
+      - 7
    ignore:
      - goos: darwin
-        goarch: "386"
+        goarch: 386
      - goos: freebsd
        goarch: arm
 archives:
-  - name_template: "{{.Os}}-{{.Arch}}{{if .Arm}}v{{.Arm}}{{end}}-{{ .ProjectName }}"
+  -
-    formats: ["tar.gz"]
+    name_template: "{{.Os}}-{{.Arch}}{{if .Arm}}v{{.Arm}}{{end}}-{{ .ProjectName }}"
    format: tar.gz
    format_overrides:
      - goos: windows
-        formats: ["zip"]
+        format: zip
 dockers:
-  # Alpine docker images
+  -
-  - dockerfile: Dockerfile
+    dockerfile: Dockerfile
    use: buildx
    build_flag_templates:
      - "--pull"
@ -58,8 +57,10 @@ dockers:
      - "filebrowser/filebrowser:{{ .Tag }}-amd64"
      - "filebrowser/filebrowser:v{{ .Major }}-amd64"
    extra_files:
-      - docker
+      - docker_config.json
-  - dockerfile: Dockerfile
+      - healthcheck.sh
  -
    dockerfile: Dockerfile
    use: buildx
    build_flag_templates:
      - "--pull"
@ -75,8 +76,10 @@ dockers:
      - "filebrowser/filebrowser:{{ .Tag }}-arm64"
      - "filebrowser/filebrowser:v{{ .Major }}-arm64"
    extra_files:
-      - docker
+      - docker_config.json
-  - dockerfile: Dockerfile
+      - healthcheck.sh
  -
    dockerfile: Dockerfile
    use: buildx
    build_flag_templates:
      - "--pull"
@ -88,13 +91,15 @@ dockers:
      - "--platform=linux/arm/v6"
    goos: linux
    goarch: arm
-    goarm: "6"
+    goarm: '6'
    image_templates:
      - "filebrowser/filebrowser:{{ .Tag }}-armv6"
      - "filebrowser/filebrowser:v{{ .Major }}-armv6"
    extra_files:
-      - docker
+      - docker_config.json
-  - dockerfile: Dockerfile
+      - healthcheck.sh
  -
    dockerfile: Dockerfile
    use: buildx
    build_flag_templates:
      - "--pull"
@ -106,15 +111,16 @@ dockers:
      - "--platform=linux/arm/v7"
    goos: linux
    goarch: arm
-    goarm: "7"
+    goarm: '7'
    image_templates:
      - "filebrowser/filebrowser:{{ .Tag }}-armv7"
      - "filebrowser/filebrowser:v{{ .Major }}-armv7"
    extra_files:
-      - docker
+      - docker_config.json
-
+      - healthcheck.sh
-  ## s6-overlay docker images
+## s6 based docker images
-  - dockerfile: Dockerfile.s6
+  -
    dockerfile: Dockerfile.s6
    use: buildx
    build_flag_templates:
      - "--pull"
@ -130,8 +136,9 @@ dockers:
      - "filebrowser/filebrowser:{{ .Tag }}-amd64-s6"
      - "filebrowser/filebrowser:v{{ .Major }}-amd64-s6"
    extra_files:
-      - docker
+      - docker/root
-  - dockerfile: Dockerfile.s6
+  -
    dockerfile: Dockerfile.s6.aarch64
    use: buildx
    build_flag_templates:
      - "--pull"
@ -147,8 +154,7 @@ dockers:
      - "filebrowser/filebrowser:{{ .Tag }}-arm64-s6"
      - "filebrowser/filebrowser:v{{ .Major }}-arm64-s6"
    extra_files:
-      - docker
+      - docker/root
 docker_manifests:
  - name_template: "filebrowser/filebrowser:latest"
    image_templates:
@ -165,7 +171,7 @@ docker_manifests:
      - "filebrowser/filebrowser:v{{ .Major }}-amd64"
      - "filebrowser/filebrowser:v{{ .Major }}-arm64"
      - "filebrowser/filebrowser:v{{ .Major }}-armv7"
-  ## s6 image manifests
+## s6 image manifests
  - name_template: "filebrowser/filebrowser:s6"
    image_templates:
      - "filebrowser/filebrowser:{{ .Tag }}-amd64-s6"
@ -178,20 +184,15 @@ docker_manifests:
    image_templates:
      - "filebrowser/filebrowser:v{{ .Major }}-amd64-s6"
      - "filebrowser/filebrowser:v{{ .Major }}-arm64-s6"
-
+brews:
 homebrew_casks:
  - name: filebrowser
    repository:
      owner: filebrowser
      name: homebrew-tap
    folder: Formula
    homepage: https://filebrowser.org
    commit_author:
      name: FileBrowser Robot
      email: robot@filebrowser.org
    homepage: https://github.com/filebrowser/filebrowser
    description: File Browser is a create-your-own-cloud-kind of software where you can install it on a server, direct it to a path and then access your files through a nice web interface
-    hooks:
+    license: "MIT"
      post:
        install: |
          if system_command("/usr/bin/xattr", args: ["-h"]).exit_status == 0
            system_command "/usr/bin/xattr", args: ["-dr", "com.apple.quarantine", "#{staged_path}/filebrowser"]
          end
--- a/.tx/config
+++ b/.tx/config
@ -0,0 +1,10 @@
 [main]
 host = https://www.transifex.com
 lang_map = pt_BR: pt-br, zh_CN: zh-cn, zh_HK: zh-hk, zh_TW: zh-tw, nl_BE: nl-be, sv_SE: sv-se
 [file-browser.file-browser]
 file_filter = frontend/src/i18n/<lang>.json
 minimum_perc = 50
 source_file = frontend/src/i18n/en.json
 source_lang = en
 type = KEYVALUEJSON
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@ -2,364 +2,6 @@
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 ## [2.37.0](https://github.com/filebrowser/filebrowser/compare/v2.36.3...v2.37.0) (2025-07-08)
 ### Features
 * Translate frontend/src/i18n/en.json in zh_CN ([65bbf44](https://github.com/filebrowser/filebrowser/commit/65bbf44e3c0bff83e64193d46e9d6ad302952276))
 * Translate frontend/src/i18n/en.json in zh_TW ([b28952c](https://github.com/filebrowser/filebrowser/commit/b28952cb2582bd4eb44e91d0676e2803c458cf31))
 * Translate frontend/src/i18n/en.json in zh_TW ([1e96fd9](https://github.com/filebrowser/filebrowser/commit/1e96fd9035d5185dc80970a2826ccb573b5f000e))
 ### Bug Fixes
 * long file name overlap ([fcb248a](https://github.com/filebrowser/filebrowser/commit/fcb248a5feb7b7404ca5923aae17f6d3f8d3cc96))
 * preview PDF is correctly displayed ([bf73e4d](https://github.com/filebrowser/filebrowser/commit/bf73e4dea3b27c01c8f6e60fb2048e1a2122a70e))
 * Upload progress size calculation ([e423395](https://github.com/filebrowser/filebrowser/commit/e423395ef0bcd106ddc7d460c055b95b5208415e))
 ### [2.36.3](https://github.com/filebrowser/filebrowser/compare/v2.36.2...v2.36.3) (2025-07-06)
 ### Bug Fixes
 * log error if branding file exists but cannot be loaded ([3645b57](https://github.com/filebrowser/filebrowser/commit/3645b578cddb9fc8f25a00e0153fb600ad1b9266))
 ### [2.36.2](https://github.com/filebrowser/filebrowser/compare/v2.36.1...v2.36.2) (2025-07-06)
 ### Bug Fixes
 * lookup directory name if blank when downloading shared directory ([046d619](https://github.com/filebrowser/filebrowser/commit/046d6193c57b4df0e3dc583b6518b43d29d302c9))
 ### [2.36.1](https://github.com/filebrowser/filebrowser/compare/v2.36.0...v2.36.1) (2025-07-03)
 ### Bug Fixes
 * remove associated shares when deleting file/folder ([e99e0b3](https://github.com/filebrowser/filebrowser/commit/e99e0b3028e1c8a50e1744bb07ecc8e809bdb8e6))
 ## [2.36.0](https://github.com/filebrowser/filebrowser/compare/v2.35.0...v2.36.0) (2025-07-02)
 ### Features
 * update icons, remove deprecated Microsoft Tiles ([04166e8](https://github.com/filebrowser/filebrowser/commit/04166e81e52d38b1f66ba3313ccb1291c239eea2))
 ## [2.35.0](https://github.com/filebrowser/filebrowser/compare/v2.34.2...v2.35.0) (2025-06-30)
 ### Features
 * Long press selects item in single click mode ([8d75220](https://github.com/filebrowser/filebrowser/commit/8d7522049ced83f28f0933b55772c32e3ad04627))
 ### Bug Fixes
 * shell value must be joined by blank space ([4403cd3](https://github.com/filebrowser/filebrowser/commit/4403cd35720dbda5a8bb1013b92582accf3317bc))
 * update documentation links ([38d0366](https://github.com/filebrowser/filebrowser/commit/38d0366acf88352b5a9a97c45837b0f865efae0b))
 ### [2.34.2](https://github.com/filebrowser/filebrowser/compare/v2.34.1...v2.34.2) (2025-06-29)
 ### Bug Fixes
 * mitigate unprotected shares ([2b5d6cb](https://github.com/filebrowser/filebrowser/commit/2b5d6cbb996a61a769acc56af0acc12eec2d8d8f))
 ### [2.34.1](https://github.com/filebrowser/filebrowser/compare/v2.34.0...v2.34.1) (2025-06-29)
 ### Bug Fixes
 * exclude to-be-moved folder from move dialog ([#5235](https://github.com/filebrowser/filebrowser/issues/5235)) ([7354eb6](https://github.com/filebrowser/filebrowser/commit/7354eb6cf966244141277c2808988855c004f908))
 * passthrough the minimum password length ([#5236](https://github.com/filebrowser/filebrowser/issues/5236)) ([bf37f88](https://github.com/filebrowser/filebrowser/commit/bf37f88c32222ad9c186482bb97338a9c9b4a93c))
 ## [2.34.0](https://github.com/filebrowser/filebrowser/compare/v2.33.10...v2.34.0) (2025-06-29)
 ### Features
 * Translate frontend/src/i18n/en.json in fa ([0acd69c](https://github.com/filebrowser/filebrowser/commit/0acd69c537ce2909ff62c4bb6980982524ece221))
 * Translate frontend/src/i18n/en.json in fa ([#5233](https://github.com/filebrowser/filebrowser/issues/5233)) ([09f679f](https://github.com/filebrowser/filebrowser/commit/09f679fae43398f5b87d21acc9d974d4d053392f))
 * update translations for project File Browser ([#5226](https://github.com/filebrowser/filebrowser/issues/5226)) ([a5ea2a2](https://github.com/filebrowser/filebrowser/commit/a5ea2a266bef619d1c4322266d1aa7d397d2c856))
 ### Bug Fixes
 * abort ongoing requests when changing pages ([#3927](https://github.com/filebrowser/filebrowser/issues/3927)) ([93c4b2e](https://github.com/filebrowser/filebrowser/commit/93c4b2e03c5176da01a7e00a03c03ffcce279bc8))
 * add configurable minimum password length ([#5225](https://github.com/filebrowser/filebrowser/issues/5225)) ([464b644](https://github.com/filebrowser/filebrowser/commit/464b644adf22a2178414a6f1e4fa286276de81d2))
 * do not expose the name of the root directory ([#5224](https://github.com/filebrowser/filebrowser/issues/5224)) ([0892559](https://github.com/filebrowser/filebrowser/commit/089255997a653c284cd4249990b58bed00086c61))
 * Graceful shutdown ([8230eb7](https://github.com/filebrowser/filebrowser/commit/8230eb7ab51ccbd00b03f5b9d6964fa4aae331d4))
 ### Reverts
 * Revert "docs: change cloudflare environment (#5231)" (#5232) ([9e273cd](https://github.com/filebrowser/filebrowser/commit/9e273cd9475d57b9500034e8b341ff8b620bcab8)), closes [#5231](https://github.com/filebrowser/filebrowser/issues/5231) [#5232](https://github.com/filebrowser/filebrowser/issues/5232)
 ### Build
 * add an arm64 target for the site image ([#5229](https://github.com/filebrowser/filebrowser/issues/5229)) ([f5e531c](https://github.com/filebrowser/filebrowser/commit/f5e531c8ae0b9b18717e184856ace0ce19beef82))
 * bump golangci-lint to 2.1.6 ([1d494ff](https://github.com/filebrowser/filebrowser/commit/1d494ff3159ef939cfb4980ccde6f27df3e738b5))
 * **deps:** bump brace-expansion from 1.1.11 to 1.1.12 in /tools ([#5228](https://github.com/filebrowser/filebrowser/issues/5228)) ([5a07291](https://github.com/filebrowser/filebrowser/commit/5a072913062a6b2b0e5c74a02ca7710218ed3e5e))
 * **deps:** bump github.com/go-viper/mapstructure/v2 ([f32f273](https://github.com/filebrowser/filebrowser/commit/f32f27383d1fafa074f038cc873bd37b7f20ee27))
 * **deps:** bump github.com/go-viper/mapstructure/v2 in /tools ([5331969](https://github.com/filebrowser/filebrowser/commit/5331969163f5ae1fd2389f665059fc9e4a98db15))
 * publish docs to cloudflare pages ([#5230](https://github.com/filebrowser/filebrowser/issues/5230)) ([8861933](https://github.com/filebrowser/filebrowser/commit/8861933cf845b104e072f35e5f37d7c26097c9dc))
 ### [2.33.10](https://github.com/filebrowser/filebrowser/compare/v2.33.9...v2.33.10) (2025-06-26)
 ### Bug Fixes
 * correctly check if command is allowed when using shell ([4d830f7](https://github.com/filebrowser/filebrowser/commit/4d830f707fc4314741fd431e70c2ce50cd5a3108))
 * correctly split shell ([f84a6db](https://github.com/filebrowser/filebrowser/commit/f84a6db680b6df1c7c8f06f1816f7e4c9e963668))
 * ignore linting error ([e735491](https://github.com/filebrowser/filebrowser/commit/e735491c57b12c3b19dd2e4b570723df78f4eb44))
 ### [2.33.9](https://github.com/filebrowser/filebrowser/compare/v2.33.8...v2.33.9) (2025-06-26)
 ### Bug Fixes
 * check exact match on command allow list ([e2e1e49](https://github.com/filebrowser/filebrowser/commit/e2e1e4913085cca8917e0f69171dc28d3c6af1b6))
 * remove auth token from /api/command ([d5b39a1](https://github.com/filebrowser/filebrowser/commit/d5b39a14fd3fc0d1c364116b41289484df7c27b2))
 * remove unused import ([c232d41](https://github.com/filebrowser/filebrowser/commit/c232d41f903d3026ec290bbe819b6c59a933048e))
 ### [2.33.8](https://github.com/filebrowser/filebrowser/compare/v2.33.7...v2.33.8) (2025-06-25)
 ### [2.33.7](https://github.com/filebrowser/filebrowser/compare/v2.33.6...v2.33.7) (2025-06-25)
 ### Bug Fixes
 * correctly parse negative boolean flags ([221451a](https://github.com/filebrowser/filebrowser/commit/221451a5179c8f139819a315b80d0ecb0e7220c3))
 * linting issues ([4bfbf33](https://github.com/filebrowser/filebrowser/commit/4bfbf332499fc8aea5f6df6aae1efa0de918d1ae))
 * linting issues ([e74c958](https://github.com/filebrowser/filebrowser/commit/e74c95886226c0ee429af1860eed21dd1f8601aa))
 ### [2.33.6](https://github.com/filebrowser/filebrowser/compare/v2.33.5...v2.33.6) (2025-06-24)
 ### Bug Fixes
 * remove incorrect default for password flag ([23bd8f6](https://github.com/filebrowser/filebrowser/commit/23bd8f67155081d707d4799393d3b1e2bebeaa34))
 ### [2.33.5](https://github.com/filebrowser/filebrowser/compare/v2.33.4...v2.33.5) (2025-06-24)
 ### Features
 * update languages for project File Browser ([#5190](https://github.com/filebrowser/filebrowser/issues/5190)) ([f330764](https://github.com/filebrowser/filebrowser/commit/f33076462a133935ca97fb6c7345303fe350e167))
 ### Bug Fixes
 * actually register the czech language ([#5189](https://github.com/filebrowser/filebrowser/issues/5189)) ([0268506](https://github.com/filebrowser/filebrowser/commit/0268506f80d33d2d31e38055e12530241d27a11b))
 ### [2.33.4](https://github.com/filebrowser/filebrowser/compare/v2.33.3...v2.33.4) (2025-06-22)
 ### Features
 * translation updates for project File Browser ([#5179](https://github.com/filebrowser/filebrowser/issues/5179)) ([f714e71](https://github.com/filebrowser/filebrowser/commit/f714e71a356c2301f394d651c9b6c467440508e3))
 ### [2.33.3](https://github.com/filebrowser/filebrowser/compare/v2.33.2...v2.33.3) (2025-06-22)
 ### Bug Fixes
 * keep command behavior in Dockerfile ([7c0c782](https://github.com/filebrowser/filebrowser/commit/7c0c7820efbbed2f0499353cc76ecb85d00ff7c3))
 * update search hotkey in help prompt ([#5178](https://github.com/filebrowser/filebrowser/issues/5178)) ([2741616](https://github.com/filebrowser/filebrowser/commit/2741616473636d40b7e9f14c9906ada08d328c3c))
 ### [2.33.2](https://github.com/filebrowser/filebrowser/compare/v2.33.1...v2.33.2) (2025-06-21)
 ### Bug Fixes
 * create user dir on signup ([0ca8059](https://github.com/filebrowser/filebrowser/commit/0ca8059d8dea4fe079146471ce4f24acc96021f2))
 ### [2.33.1](https://github.com/filebrowser/filebrowser/compare/v2.33.0...v2.33.1) (2025-06-21)
 ### Bug Fixes
 * downloadUrl of file preview ([#3728](https://github.com/filebrowser/filebrowser/issues/3728)) ([8a14018](https://github.com/filebrowser/filebrowser/commit/8a14018861fe581672bbd27cdc3ae5691f70a108))
 * remove auth query parameter from download and preview links ([cbb7124](https://github.com/filebrowser/filebrowser/commit/cbb712484d3bdabc033acaf3b696ef4f5865813d))
 * search uses ctrl+shift+f instead of hijacking browser's ctrl+f ([#4638](https://github.com/filebrowser/filebrowser/issues/4638)) ([a02b297](https://github.com/filebrowser/filebrowser/commit/a02b2972ebde2a58806ad1377bad46e748b63166))
 ## [2.33.0](https://github.com/filebrowser/filebrowser/compare/v2.32.3...v2.33.0) (2025-06-18)
 ### Features
 * improved docker image volumes and permissions ([#5160](https://github.com/filebrowser/filebrowser/issues/5160)) ([2e26393](https://github.com/filebrowser/filebrowser/commit/2e26393a022df0eaa9e08727407aba8b997aa728))
 ### [2.32.3](https://github.com/filebrowser/filebrowser/compare/v2.32.2...v2.32.3) (2025-06-17)
 ### [2.32.2](https://github.com/filebrowser/filebrowser/compare/v2.32.1...v2.32.2) (2025-06-17)
 ### Features
 * updated for project File Browser ([#5159](https://github.com/filebrowser/filebrowser/issues/5159)) ([c34c0af](https://github.com/filebrowser/filebrowser/commit/c34c0afecf3242b16ad5d5584cd90a6ad323361c))
 ### [2.32.1](https://github.com/filebrowser/filebrowser/compare/v2.32.0...v2.32.1) (2025-06-16)
 ### Features
 * add Vietnamese translation ([#3840](https://github.com/filebrowser/filebrowser/issues/3840)) ([56b80b6](https://github.com/filebrowser/filebrowser/commit/56b80b6d9b4710538765ba7df5da1f03898f6b81))
 * improve pt-br translations with new keys and refinements ([#4903](https://github.com/filebrowser/filebrowser/issues/4903)) ([a882fb6](https://github.com/filebrowser/filebrowser/commit/a882fb6c85ab6ccc845ed0bf3908d8e5e60ce346))
 * update translation ko.json ([#3852](https://github.com/filebrowser/filebrowser/issues/3852)) ([d9ebd65](https://github.com/filebrowser/filebrowser/commit/d9ebd65ffcf9b2166fec708d51849796d12b16e0))
 ### Bug Fixes
 * err shadowing lint ([c606a01](https://github.com/filebrowser/filebrowser/commit/c606a01a2d20932fb32ee896234d57631f8c47e4))
 * generate random admin password on quick setup ([a46acba](https://github.com/filebrowser/filebrowser/commit/a46acba5f92ee044661880d6ae349e289d984328)), closes [#3646](https://github.com/filebrowser/filebrowser/issues/3646)
 * imports lint ([54b91b8](https://github.com/filebrowser/filebrowser/commit/54b91b8ff0b8ee1f02f72425ab97d27a5d942fc3))
 * set videojs locale ([#3742](https://github.com/filebrowser/filebrowser/issues/3742)) ([71a8f56](https://github.com/filebrowser/filebrowser/commit/71a8f5662c207e3cd4ee714a5b5a961121f510cd))
 ### Build
 * **deps-dev:** bump vite from 6.0.11 to 6.1.6 in /frontend ([#3886](https://github.com/filebrowser/filebrowser/issues/3886)) ([5355629](https://github.com/filebrowser/filebrowser/commit/5355629fd1e7bd85ee3222fca22da899ba23ea95))
 * **deps:** bump golang.org/x/crypto from 0.31.0 to 0.35.0 ([#3865](https://github.com/filebrowser/filebrowser/issues/3865)) ([0ba9505](https://github.com/filebrowser/filebrowser/commit/0ba9505a19cb369653fc9f8260dc02fcc6587629))
 * **deps:** bump golang.org/x/net from 0.33.0 to 0.38.0 ([#3869](https://github.com/filebrowser/filebrowser/issues/3869)) ([cfea84f](https://github.com/filebrowser/filebrowser/commit/cfea84fd5e7ec9c1d2366293e5db12baaa4e3a81))
 * **deps:** bump vue-i18n from 11.0.1 to 11.1.2 in /frontend ([#3786](https://github.com/filebrowser/filebrowser/issues/3786)) ([35d1c09](https://github.com/filebrowser/filebrowser/commit/35d1c092434b80b22c89a614a02122e9f5965b39))
 ## [2.32.0](https://github.com/filebrowser/filebrowser/compare/v2.31.2...v2.32.0) (2025-01-31)
 ### Features
 * create user on proxy authentication if user does not exist ([#3569](https://github.com/filebrowser/filebrowser/issues/3569)) ([209acf2](https://github.com/filebrowser/filebrowser/commit/209acf2429b06e2e8d78218937c59fd7e7edd1be))
 ### Bug Fixes
 * add proper healthcheck for S6 containers ([#3691](https://github.com/filebrowser/filebrowser/issues/3691)) ([045064f](https://github.com/filebrowser/filebrowser/commit/045064f8b8bf9f86058e877448085e38da8b3f2e))
 * disk usage refreshing ([#3692](https://github.com/filebrowser/filebrowser/issues/3692)) ([bbdd313](https://github.com/filebrowser/filebrowser/commit/bbdd313705b8d253f0c47ad717a6e47b2f46e719))
 * Fix user creation on proxy auth ([#3666](https://github.com/filebrowser/filebrowser/issues/3666)) ([5300d00](https://github.com/filebrowser/filebrowser/commit/5300d00d2e7dbb80a252aff57e100113f02506c3))
 * prompts disappearing on copy / move / upload ([#3537](https://github.com/filebrowser/filebrowser/issues/3537)) ([d1c84a8](https://github.com/filebrowser/filebrowser/commit/d1c84a84123c77dede05c023b3697a432b56122c))
 ### Refactorings
 * Fix eslint warnings ([#3698](https://github.com/filebrowser/filebrowser/issues/3698)) ([0201f9c](https://github.com/filebrowser/filebrowser/commit/0201f9c5c4dd2a4d5a3503e59cdb8045e8d3a91f)), closes [#3407](https://github.com/filebrowser/filebrowser/issues/3407)
 ### Build
 * **deps:** bump cross-spawn from 7.0.3 to 7.0.6 in /tools ([#3601](https://github.com/filebrowser/filebrowser/issues/3601)) ([25372ed](https://github.com/filebrowser/filebrowser/commit/25372edb5c0e616e82b76b5f523633af57d347e0))
 * **deps:** bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 ([#3574](https://github.com/filebrowser/filebrowser/issues/3574)) ([2fdea73](https://github.com/filebrowser/filebrowser/commit/2fdea73430011846276a1cda52458f1d670f5ea7))
 * **deps:** bump golang.org/x/crypto from 0.26.0 to 0.31.0 ([#3634](https://github.com/filebrowser/filebrowser/issues/3634)) ([e92dbb4](https://github.com/filebrowser/filebrowser/commit/e92dbb4bb8b7894264fbf0a48a641712c3b68766))
 * **deps:** bump golang.org/x/net from 0.23.0 to 0.33.0 ([#3712](https://github.com/filebrowser/filebrowser/issues/3712)) ([1194cfe](https://github.com/filebrowser/filebrowser/commit/1194cfe0097a70399c1f06cf0f514b9d70fa463c))
 * **deps:** bump vue-i18n from 9.10.2 to 9.14.2 in /frontend ([#3618](https://github.com/filebrowser/filebrowser/issues/3618)) ([0659594](https://github.com/filebrowser/filebrowser/commit/065959451d3ba12019c6151274aa4e6904cdca99))
 * fix go releaser ([ba797cd](https://github.com/filebrowser/filebrowser/commit/ba797cda3135eddb9b7165dc5ceb932399cb54df))
 * update to node 22 and pnpm ([#3616](https://github.com/filebrowser/filebrowser/issues/3616)) ([d51a343](https://github.com/filebrowser/filebrowser/commit/d51a3438201274a1b826be1b775ca1035ade20c5))
 ### [2.31.2](https://github.com/filebrowser/filebrowser/compare/v2.31.1...v2.31.2) (2024-10-03)
 ### Bug Fixes
 * added whitespace before version ([#3510](https://github.com/filebrowser/filebrowser/issues/3510)) ([2b37e69](https://github.com/filebrowser/filebrowser/commit/2b37e696c9bde4d0c453de236a3555d982346bbb))
 * change location of custom init scripts ([#3493](https://github.com/filebrowser/filebrowser/issues/3493)) ([406d4f7](https://github.com/filebrowser/filebrowser/commit/406d4f78845a1684df7c9c457b208f4dd9b2a930))
 * files list alignment ([#3494](https://github.com/filebrowser/filebrowser/issues/3494)) ([64400ff](https://github.com/filebrowser/filebrowser/commit/64400ffda8b09f66b8662a3c9400235139800a4d))
 * german translation spelling typos ([#3469](https://github.com/filebrowser/filebrowser/issues/3469)) ([1e7c415](https://github.com/filebrowser/filebrowser/commit/1e7c41505fb6a3b9baa1534787492a186e09bcfb))
 ### Build
 * **deps-dev:** bump vite from 5.2.7 to 5.4.6 in /frontend ([#3496](https://github.com/filebrowser/filebrowser/issues/3496)) ([ec7b643](https://github.com/filebrowser/filebrowser/commit/ec7b643e8e9499f7ff226ec7f8e63a9df9890352))
 * **deps:** bump rollup from 4.21.3 to 4.22.4 in /frontend ([#3504](https://github.com/filebrowser/filebrowser/issues/3504)) ([03d74ee](https://github.com/filebrowser/filebrowser/commit/03d74ee7582196c09720f8d488056339f06c446c))
 ### [2.31.1](https://github.com/filebrowser/filebrowser/compare/v2.31.0...v2.31.1) (2024-08-30)
 ### Bug Fixes
 * command not found in shell ([#3438](https://github.com/filebrowser/filebrowser/issues/3438)) ([121d9ab](https://github.com/filebrowser/filebrowser/commit/121d9abecdc7d4e923cfc5023519995938a6ccae))
 ### Build
 * update to alpine 3.20 ([#3447](https://github.com/filebrowser/filebrowser/issues/3447)) ([7de6bc4](https://github.com/filebrowser/filebrowser/commit/7de6bc4a912b5734dd0df02ed8391e78619e2615))
 ## [2.31.0](https://github.com/filebrowser/filebrowser/compare/v2.30.0...v2.31.0) (2024-08-29)
 ### Features
 * add Czech translation ([#3416](https://github.com/filebrowser/filebrowser/issues/3416)) ([8e67a12](https://github.com/filebrowser/filebrowser/commit/8e67a12f260caefcbe419c2281025b9b15f02bf3))
 * Added epub preview. Resolves [#3375](https://github.com/filebrowser/filebrowser/issues/3375) ([#3376](https://github.com/filebrowser/filebrowser/issues/3376)) ([99a6382](https://github.com/filebrowser/filebrowser/commit/99a6382b320874e94f9bd74708f46dd9a7485d3c))
 * implement markdown file preview in Ace editor ([#3431](https://github.com/filebrowser/filebrowser/issues/3431)) ([b0f4604](https://github.com/filebrowser/filebrowser/commit/b0f4604f44e6a35e07df3000f106f523cd942cfc))
 * support mime type for epub extension ([#3425](https://github.com/filebrowser/filebrowser/issues/3425)) ([f6f7e5f](https://github.com/filebrowser/filebrowser/commit/f6f7e5fea3ff7073ee652008a51cb5445a6f3d5d))
 ### Bug Fixes
 * clipboard copy in safari ([#3261](https://github.com/filebrowser/filebrowser/issues/3261)) ([1fccc5d](https://github.com/filebrowser/filebrowser/commit/1fccc5d649add2a56c55e75cf9dec4851e6d7cbf))
 * CSS selectors for listing icons ([#3277](https://github.com/filebrowser/filebrowser/issues/3277)) ([2a90cdf](https://github.com/filebrowser/filebrowser/commit/2a90cdfdaff8655c7cb1167c01994a0978dece8f))
 * fix catalan i18n file ([090272e](https://github.com/filebrowser/filebrowser/commit/090272e3b7c56a940c4aa2d28f860c574aa17d53))
 * fixing an issue where the upload indicator would "jump" around in the UI ([#3354](https://github.com/filebrowser/filebrowser/issues/3354)) ([7be5644](https://github.com/filebrowser/filebrowser/commit/7be564495226bc6846289a56edb8893511036c6e))
 * **frontend:** N files selected hint use i18n ([#3390](https://github.com/filebrowser/filebrowser/issues/3390)) ([10bf3cf](https://github.com/filebrowser/filebrowser/commit/10bf3cffbf8eb7d95fe4e1cc6acf1012329744b9))
 * pdf preview header ([#3274](https://github.com/filebrowser/filebrowser/issues/3274)) ([a838868](https://github.com/filebrowser/filebrowser/commit/a8388689f3019083f263845900f683ddc13884dc))
 * pull down to refresh within editor ([#3378](https://github.com/filebrowser/filebrowser/issues/3378)) ([21783ed](https://github.com/filebrowser/filebrowser/commit/21783ed91a13ad52afdb411e43faf14fb6ef6e42))
 ### Build
 * bump go libs ([b596567](https://github.com/filebrowser/filebrowser/commit/b596567c6163d57eaefbf3e30d84cfca65c24cdf))
 * bump go version to 1.23.0 ([364fdaa](https://github.com/filebrowser/filebrowser/commit/364fdaaf0c1eace82ff8637d337cc1b32e5e9972))
 * bump golangci-lint to 1.60.3 ([a6347c8](https://github.com/filebrowser/filebrowser/commit/a6347c88586e584b4565277b0010fa9ff2576b1f))
 * **deps-dev:** bump braces from 3.0.2 to 3.0.3 in /frontend ([#3316](https://github.com/filebrowser/filebrowser/issues/3316)) ([e8589be](https://github.com/filebrowser/filebrowser/commit/e8589be6409a2b29edd44ee2edd3fbf6b2d72724))
 * **deps-dev:** bump ws from 8.16.0 to 8.17.1 in /frontend ([#3321](https://github.com/filebrowser/filebrowser/issues/3321)) ([c3465f9](https://github.com/filebrowser/filebrowser/commit/c3465f99136506d51b813be4f31b289e708da0ce))
 * **deps:** bump golang.org/x/image from 0.15.0 to 0.18.0 ([#3335](https://github.com/filebrowser/filebrowser/issues/3335)) ([30a8ddf](https://github.com/filebrowser/filebrowser/commit/30a8ddf113862e3de2c09547662b7f2af8a30dfe))
 * fix goreleaser file ([056cfa8](https://github.com/filebrowser/filebrowser/commit/056cfa8facdca4c397a6b245028d4c9d3f0ca518))
 ## [2.30.0](https://github.com/filebrowser/filebrowser/compare/v2.29.0...v2.30.0) (2024-05-19)
 ### Features
 * allow multi-select with SHIFT key in singleClick mode ([#3185](https://github.com/filebrowser/filebrowser/issues/3185)) ([2e47a03](https://github.com/filebrowser/filebrowser/commit/2e47a038d63de8f848b070578c1d71f765438a24))
 * Enhance MIME Type Detection for Additional File Extensions ([#3183](https://github.com/filebrowser/filebrowser/issues/3183)) ([be62f56](https://github.com/filebrowser/filebrowser/commit/be62f56782551e17d6d5dc23bc29cc56ef961a66))
 ### Bug Fixes
 * add overlay for sidebar on mobile ([#3197](https://github.com/filebrowser/filebrowser/issues/3197)) ([3b48f75](https://github.com/filebrowser/filebrowser/commit/3b48f75301287fe94cbbacff184b4db03f37f7ea))
 * current folder name in page title ([#3200](https://github.com/filebrowser/filebrowser/issues/3200)) ([e336a25](https://github.com/filebrowser/filebrowser/commit/e336a25ad29ed8b956169d426992860a877ee551))
 * Fixing the inability to play MKV video files online and enhancing the auxiliary features of the VideoPlayer. ([#3181](https://github.com/filebrowser/filebrowser/issues/3181)) ([782375b](https://github.com/filebrowser/filebrowser/commit/782375b1cb4c4f954468c30ec277ce021c82b40d))
 * shell window size ([#3198](https://github.com/filebrowser/filebrowser/issues/3198)) ([4c5b612](https://github.com/filebrowser/filebrowser/commit/4c5b612cb2563817f9da50413c7cf9e89b4c4d4a))
 * The file type icon in the file list is sensitive to the case of the suffix name ([#3187](https://github.com/filebrowser/filebrowser/issues/3187)) ([a9c327c](https://github.com/filebrowser/filebrowser/commit/a9c327cc0687796a3c7bfafd4ddabf4342859e31))
 ## [2.29.0](https://github.com/filebrowser/filebrowser/compare/v2.28.0...v2.29.0) (2024-04-30)
 ### Features
 * Display Upload Progress as Percentage and File Size / Total File Size ([#3111](https://github.com/filebrowser/filebrowser/issues/3111)) ([236ca63](https://github.com/filebrowser/filebrowser/commit/236ca637f99e373adfeaaefc5db6af50bd15b6bf))
 * migrate to vue 3 ([#2689](https://github.com/filebrowser/filebrowser/issues/2689)) ([5100e58](https://github.com/filebrowser/filebrowser/commit/5100e587d73831ecdb5e3bd35a78fef96ad248a4))
 ### Bug Fixes
 * abort upload behavior to properly handle server-side deletion and frontend state reset ([#3114](https://github.com/filebrowser/filebrowser/issues/3114)) ([434e49b](https://github.com/filebrowser/filebrowser/commit/434e49bf59e4ddf7ec90893fa3fd53faee8c9cbb))
 * apply proper zindex to modal dialogs ([#3172](https://github.com/filebrowser/filebrowser/issues/3172)) ([821f51e](https://github.com/filebrowser/filebrowser/commit/821f51ea5ad1f5c2eb72441bc761031cacee43e1))
 * correct list item selector ([#3126](https://github.com/filebrowser/filebrowser/issues/3126)) ([#3147](https://github.com/filebrowser/filebrowser/issues/3147)) ([22a05e1](https://github.com/filebrowser/filebrowser/commit/22a05e1f02a083cf7b630e16873dad0de89b7854))
 * don't redirect to login when no auth ([#3165](https://github.com/filebrowser/filebrowser/issues/3165)) ([da5a6e0](https://github.com/filebrowser/filebrowser/commit/da5a6e051faa80134c2adf4e621426cbdf046c88))
 * Frontend bug, administrators unable to delete users ([#3170](https://github.com/filebrowser/filebrowser/issues/3170)) ([bee71d9](https://github.com/filebrowser/filebrowser/commit/bee71d93fee137cdd807cd8f7716c7da0830fae7))
 * handle quotes in healthcheck.sh ([#3130](https://github.com/filebrowser/filebrowser/issues/3130)) ([18f04a7](https://github.com/filebrowser/filebrowser/commit/18f04a7d26186927f51f46354f3b2164a68f1b41))
 * the copy method in clipboard.ts ([#3177](https://github.com/filebrowser/filebrowser/issues/3177)) ([4786187](https://github.com/filebrowser/filebrowser/commit/4786187852b8eef07e40aa00cd159ccc1e7e79dc))
 ### Build
 * bump go version to 1.22.1 ([bbd0abb](https://github.com/filebrowser/filebrowser/commit/bbd0abbdfdbb3ddf3326247b7c6d925751dfabcb))
 * bump go version to 1.22.2 ([#3158](https://github.com/filebrowser/filebrowser/issues/3158)) ([a9da7fd](https://github.com/filebrowser/filebrowser/commit/a9da7fd56c849b5a13133136b35ef5ebee622962))
 * **deps:** bump golang.org/x/net from 0.22.0 to 0.23.0 ([#3133](https://github.com/filebrowser/filebrowser/issues/3133)) ([6b77b8d](https://github.com/filebrowser/filebrowser/commit/6b77b8d683f7357ef71af678550e78910c10ddeb))
 ## [2.28.0](https://github.com/filebrowser/filebrowser/compare/v2.27.0...v2.28.0) (2024-04-01)
@ -370,7 +12,7 @@ All notable changes to this project will be documented in this file. See [standa
 * close editor when click escape key ([#2947](https://github.com/filebrowser/filebrowser/issues/2947)) ([70c8261](https://github.com/filebrowser/filebrowser/commit/70c826133b8578b8712e6db8f762a15a076cd9a9))
 * enable preview in shared folder ([#3055](https://github.com/filebrowser/filebrowser/issues/3055)) ([4c233c3](https://github.com/filebrowser/filebrowser/commit/4c233c3db39ea5a00d6e602ec0ecbddecb590877))
 * focus editor when opened ([#2946](https://github.com/filebrowser/filebrowser/issues/2946)) ([b19710e](https://github.com/filebrowser/filebrowser/commit/b19710efca6daa7af56dc211d0051d500d2eea22))
-* freezing the list in the background while previewing a file ([#3004](https://github.com/filebrowser/filebrowser/issues/3004)) ([e167c3e](https://github.com/filebrowser/filebrowser/commit/e167c3e1efed8b16be45d994a8d443fda1d8cf49))
+* freezing the list in the backgroud while previewing a file ([#3004](https://github.com/filebrowser/filebrowser/issues/3004)) ([e167c3e](https://github.com/filebrowser/filebrowser/commit/e167c3e1efed8b16be45d994a8d443fda1d8cf49))
 * prompt to confirm discard editor changes ([#2948](https://github.com/filebrowser/filebrowser/issues/2948)) ([fb1a09c](https://github.com/filebrowser/filebrowser/commit/fb1a09c7c172b913c12b30975ca545e505df0c05))
 * select multiple files with ctrl even with singleClick option ([#2953](https://github.com/filebrowser/filebrowser/issues/2953)) ([d49c3df](https://github.com/filebrowser/filebrowser/commit/d49c3dfacfc0ff07e620b3ad2700e64927b06235))
--- a/CODE-OF-CONDUCT.md
+++ b/CODE-OF-CONDUCT.md
@ -1,46 +0,0 @@
 # Code of Conduct
 ## Contributor Covenant Code of Conduct
 ### Our Pledge
 In the interest of fostering an open and welcoming environment, we as contributors and maintainers pledge to making participation in our project and our community a harassment-free experience for everyone, regardless of age, body size, disability, ethnicity, gender identity and expression, level of experience, nationality, personal appearance, race, religion, or sexual identity and orientation.
 ### Our Standards
 Examples of behavior that contributes to creating a positive environment include:
 * Using welcoming and inclusive language
 * Being respectful of differing viewpoints and experiences
 * Gracefully accepting constructive criticism
 * Focusing on what is best for the community
 * Showing empathy towards other community members
 Examples of unacceptable behavior by participants include:
 * The use of sexualized language or imagery and unwelcome sexual attention or advances
 * Trolling, insulting/derogatory comments, and personal or political attacks
 * Public or private harassment
 * Publishing others' private information, such as a physical or electronic address, without explicit permission
 * Other conduct which could reasonably be considered inappropriate in a professional setting
 ### Our Responsibilities
 Project maintainers are responsible for clarifying the standards of acceptable behavior and are expected to take appropriate and fair corrective action in response to any instances of unacceptable behavior.
 Project maintainers have the right and responsibility to remove, edit, or reject comments, commits, code, wiki edits, issues, and other contributions that are not aligned to this Code of Conduct, or to ban temporarily or permanently any contributor for other behaviors that they deem inappropriate, threatening, offensive, or harmful.
 ### Scope
 This Code of Conduct applies both within project spaces and in public spaces when an individual is representing the project or its community. Examples of representing a project or community include using an official project e-mail address, posting via an official social media account, or acting as an appointed representative at an online or offline event. Representation of a project may be further defined and clarified by project maintainers.
 ### Enforcement
 Instances of abusive, harassing, or otherwise unacceptable behavior may be reported by contacting the project team at hacdias@gmail.com. The project team will review and investigate all complaints, and will respond in a way that it deems appropriate to the circumstances. The project team is obligated to maintain confidentiality with regard to the reporter of an incident. Further details of specific enforcement policies may be posted separately.
 Project maintainers who do not follow or enforce the Code of Conduct in good faith may face temporary or permanent repercussions as determined by other members of the project's leadership.
 ### Attribution
 This Code of Conduct is adapted from the [Contributor Covenant](http://contributor-covenant.org), version 1.4, available at [https://contributor-covenant.org/version/1/4](https://contributor-covenant.org/version/1/4).
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@ -1,91 +0,0 @@
 # Contributing
 If you're interested in contributing to this project, this is the best place to start. Before contributing to this project, please take a bit of time to read our [Code of Conduct](code-of-conduct.md). Also, note that this project is open-source and licensed under [Apache License 2.0](LICENSE).
 ## Project Structure
 The backend side of the application is written in [Go](https://golang.org/), while the frontend (located on a subdirectory of the same name) is written in [Vue.js](https://vuejs.org/). Due to the tight coupling required by some features, basic knowledge of both Go and Vue.js is recommended.
 * Learn Go: [https://github.com/golang/go/wiki/Learn](https://github.com/golang/go/wiki/Learn)
 * Learn Vue.js: [https://vuejs.org/guide/introduction.html](https://vuejs.org/guide/introduction.html)
 We encourage you to use git to manage your fork. To clone the main repository, just run:
 ```bash
 git clone https://github.com/filebrowser/filebrowser
 ```
 ## Build
 ### Frontend
 We are using [Node.js](https://nodejs.org/en/) on the frontend to manage the build process. The steps to build it are:
 ```bash
 # From the root of the repo, go to frontend/
 cd frontend
 # Install the dependencies
 pnpm install
 # Build the frontend
 pnpm run build
 ```
 This will install the dependencies and build the frontend so you can then embed it into the Go app. Although, if you want to play with it, you'll get bored of building it after every change you do. So, you can run the command below to watch for changes:
 ```bash
 pnpm run dev
 ```
 ### Backend
 First of all, you need to download the required dependencies. We are using the built-in `go mod` tool for dependency management. To get the modules, run:
 ```bash
 go mod download
 ```
 The magic of File Browser is that the static assets are bundled into the final binary. For that, we use [Go embed.FS](https://golang.org/pkg/embed/). The files from `frontend/dist` will be embedded during the build process.
 To build File Browser is just like any other Go program:
 ```bash
 go build
 ```
 To create a development build use the "dev" tag, this way the content inside the frontend folder will not be embedded in the binary but will be reloaded at every change:
 ```bash
 go build -tags dev
 ```
 ## Translations
 Translations are managed on Transifex, which is an online website where everyone can contribute and translate strings for our project. It automatically syncs with the main language file \(in English\) and,, for you to contribute, you just need to:
 1. Go to our Transifex web page: [app.transifex.com/file-browser/file-browser](https://app.transifex.com/file-browser/file-browser/)
 2. Click on **Join the project** and pick your language. We'll accept you as soon as possible. If you're language is not on the list, please request it via the interface.
 Translations are automatically pushed to GitHub via an integration.
 ## Authentication Provider
 To build a new authentication provider, you need to implement the [Auther interface](https://github.com/filebrowser/filebrowser/blob/master/auth/auth.go), whose method will be called on the login page after the user has submitted their login data.
 ```go
 // Auther is the authentication interface.
 type Auther interface {
    // Auth is called to authenticate a request.
    Auth(r *http.Request, s *users.Storage, root string) (*users.User, error)
 }
 ```
 After implementing the interface you should:
 1. Add it to [`auth` directory](https://github.com/filebrowser/filebrowser/blob/master/auth).
 2. Add it to the [configuration parser](https://github.com/filebrowser/filebrowser/blob/master/cmd/config.go) for the CLI.
 3. Add it to the [`authBackend.Get`](https://github.com/filebrowser/filebrowser/blob/master/storage/bolt/auth.go).
 If you need to add more flags, please update the function `addConfigFlags`.
--- a/41
+++ b/41
@ -1,32 +1,19 @@
-FROM alpine:3.22
+FROM alpine:latest
 RUN apk --update add ca-certificates \
                     mailcap \
                     curl \
                     jq
-RUN apk update && \
+COPY healthcheck.sh /healthcheck.sh
-  apk --no-cache add ca-certificates mailcap curl jq tini
+RUN chmod +x /healthcheck.sh  # Make the script executable
-# Make user and create necessary directories
+HEALTHCHECK --start-period=2s --interval=5s --timeout=3s \
-ENV UID=1000
+    CMD /healthcheck.sh || exit 1
 ENV GID=1000
 RUN addgroup -g $GID user && \
  adduser -D -u $UID -G user user && \
  mkdir -p /config /database /srv && \
  chown -R user:user /config /database /srv
 # Copy files and set permissions
 COPY filebrowser /bin/filebrowser
 COPY docker/common/ /
 COPY docker/alpine/ /
 RUN chown -R user:user /bin/filebrowser /defaults healthcheck.sh init.sh
 # Define healthcheck script
 HEALTHCHECK --start-period=2s --interval=5s --timeout=3s CMD /healthcheck.sh
 # Set the user, volumes and exposed ports
 USER user
 VOLUME /srv /config /database
 VOLUME /srv
 EXPOSE 80
-ENTRYPOINT [ "tini", "--", "/init.sh", "filebrowser", "--config", "/config/settings.json" ]
+COPY docker_config.json /.filebrowser.json
 COPY filebrowser /filebrowser
 ENTRYPOINT [ "/filebrowser" ]
--- a/Dockerfile.s6
+++ b/Dockerfile.s6
@ -1,23 +1,16 @@
-FROM ghcr.io/linuxserver/baseimage-alpine:3.22
+FROM ghcr.io/linuxserver/baseimage-alpine:3.17
-RUN apk update && \
+RUN apk --update add ca-certificates \
-  apk --no-cache add ca-certificates mailcap curl jq
+                     mailcap \
                     curl
-# Make user and create necessary directories
+HEALTHCHECK --start-period=2s --interval=5s --timeout=3s \
-RUN mkdir -p /config /database /srv && \
+  CMD curl -f http://localhost/health || exit 1
  chown -R abc:abc /config /database /srv
-# Copy files and set permissions
+# copy local files
-COPY filebrowser /bin/filebrowser
+COPY docker/root/ /
-COPY docker/common/ /
+COPY filebrowser /usr/bin/filebrowser
 COPY docker/s6/ /
-RUN chown -R abc:abc /bin/filebrowser /defaults healthcheck.sh
+# ports and volumes
 # Define healthcheck script
 HEALTHCHECK --start-period=2s --interval=5s --timeout=3s CMD /healthcheck.sh
 # Set the volumes and exposed ports
 VOLUME /srv /config /database
 EXPOSE 80
--- a/Dockerfile.s6.aarch64
+++ b/Dockerfile.s6.aarch64
@ -0,0 +1,16 @@
 FROM ghcr.io/linuxserver/baseimage-alpine:arm64v8-3.17
 RUN apk --update add ca-certificates \
                     mailcap \
                     curl
 HEALTHCHECK --start-period=2s --interval=5s --timeout=3s \
  CMD curl -f http://localhost/health || exit 1
 # copy local files
 COPY docker/root/ /
 COPY filebrowser /usr/bin/filebrowser
 # ports and volumes
 VOLUME /srv /config /database
 EXPOSE 80
--- a/Dockerfile.s6.armhf
+++ b/Dockerfile.s6.armhf
@ -0,0 +1,16 @@
 FROM ghcr.io/linuxserver/baseimage-alpine:arm32v7-3.17
 RUN apk --update add ca-certificates \
                     mailcap \
                     curl
 HEALTHCHECK --start-period=2s --interval=5s --timeout=3s \
  CMD curl -f http://localhost/health || exit 1
 # copy local files
 COPY docker/root/ /
 COPY filebrowser /usr/bin/filebrowser
 # ports and volumes
 VOLUME /srv /config /database
 EXPOSE 80
--- a/2
+++ b/2
@ -187,7 +187,7 @@
      same "printed page" as the copyright notice for easier
      identification within third-party archives.
-   Copyright 2018 File Browser Contributors
+   Copyright 2018 File Browser contributors
   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.
--- a/26
+++ b/26
@ -3,14 +3,6 @@ include tools.mk
 LDFLAGS += -X "$(MODULE)/version.Version=$(VERSION)" -X "$(MODULE)/version.CommitSHA=$(VERSION_HASH)"
 SITE_DOCKER_FLAGS = \
 	-v $(CURDIR)/www:/docs \
 	-v $(CURDIR)/LICENSE:/docs/docs/LICENSE \
 	-v $(CURDIR)/SECURITY.md:/docs/docs/security.md \
 	-v $(CURDIR)/CHANGELOG.md:/docs/docs/changelog.md \
 	-v $(CURDIR)/CODE-OF-CONDUCT.md:/docs/docs/code-of-conduct.md \
 	-v $(CURDIR)/CONTRIBUTING.md:/docs/docs/contributing.md
 ## Build:
 .PHONY: build
@ -18,7 +10,7 @@ build: | build-frontend build-backend ## Build binary
 .PHONY: build-frontend
 build-frontend: ## Build frontend
-	$Q cd frontend && pnpm install --frozen-lockfile && pnpm run build
+	$Q cd frontend && npm ci && npm run build
 .PHONY: build-backend
 build-backend: ## Build backend
@ -29,18 +21,17 @@ test: | test-frontend test-backend ## Run all tests
 .PHONY: test-frontend
 test-frontend: ## Run frontend tests
 	$Q cd frontend && pnpm install --frozen-lockfile && pnpm run typecheck
 .PHONY: test-backend
 test-backend: ## Run backend tests
 	$Q $(go) test -v ./...
 .PHONY: lint
-lint: lint-frontend lint-backend ## Run all linters
+lint: lint-frontend lint-backend lint-commits ## Run all linters
 .PHONY: lint-frontend
 lint-frontend: ## Run frontend linters
-	$Q cd frontend && pnpm install --frozen-lockfile && pnpm run lint
+	$Q cd frontend && npm ci && npm run lint
 .PHONY: lint-backend
 lint-backend: | $(golangci-lint) ## Run backend linters
@ -61,17 +52,6 @@ clean: clean-tools ## Clean
 bump-version: $(standard-version) ## Bump app version
 	$Q ./scripts/bump_version.sh
 .PHONY: site
 site: ## Build site
 	@rm -rf www/public
 	docker build -f www/Dockerfile --progress=plain -t filebrowser.site www
 	docker run --rm $(SITE_DOCKER_FLAGS) filebrowser.site build -d "public"
 .PHONY: site-serve
 site-serve: ## Serve site for development
 	docker build -f www/Dockerfile --progress=plain -t filebrowser.site www
 	docker run --rm -it -p 8000:8000 $(SITE_DOCKER_FLAGS) filebrowser.site
 ## Help:
 help: ## Show this help
 	@echo ''
--- a/README.md
+++ b/README.md
@ -2,37 +2,38 @@
  <img src="https://raw.githubusercontent.com/filebrowser/logo/master/banner.png" width="550"/>
 </p>
 ![Preview](https://user-images.githubusercontent.com/5447088/50716739-ebd26700-107a-11e9-9817-14230c53efd2.gif)
 [![Build](https://github.com/filebrowser/filebrowser/actions/workflows/main.yaml/badge.svg)](https://github.com/filebrowser/filebrowser/actions/workflows/main.yaml)
-[![Go Report Card](https://goreportcard.com/badge/github.com/filebrowser/filebrowser)](https://goreportcard.com/report/github.com/filebrowser/filebrowser)
+[![Go Report Card](https://goreportcard.com/badge/github.com/filebrowser/filebrowser?style=flat-square)](https://goreportcard.com/report/github.com/filebrowser/filebrowser)
-[![Documentation](https://img.shields.io/badge/godoc-reference-blue.svg)](http://godoc.org/github.com/filebrowser/filebrowser)
+[![Documentation](https://img.shields.io/badge/godoc-reference-blue.svg?style=flat-square)](http://godoc.org/github.com/filebrowser/filebrowser)
-[![Version](https://img.shields.io/github/release/filebrowser/filebrowser.svg)](https://github.com/filebrowser/filebrowser/releases/latest)
+[![Version](https://img.shields.io/github/release/filebrowser/filebrowser.svg?style=flat-square)](https://github.com/filebrowser/filebrowser/releases/latest)
-[![Chat IRC](https://img.shields.io/badge/freenode-%23filebrowser-blue.svg)](http://webchat.freenode.net/?channels=%23filebrowser)
+[![Chat IRC](https://img.shields.io/badge/freenode-%23filebrowser-blue.svg?style=flat-square)](http://webchat.freenode.net/?channels=%23filebrowser)
-File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview and edit your files. It is a **create-your-own-cloud**-kind of software where you can just install it on your server, direct it to a path and access your files through a nice web interface.
+filebrowser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit your files. It allows the creation of multiple users and each user can have its own directory. It can be used as a standalone app.
-## Documentation
+## Demo
-Documentation on how to install, configure, and contribute to this project is hosted at [filebrowser.org](https://filebrowser.org).
+url: https://demo.filebrowser.org/
-## Project Status
+credentials: `demo`/`demo`
-> [!WARNING]
+## Features
 >
 > This project is currently on **maintenance-only** mode, and is looking for new maintainers. For more information, please read the [discussion #4906](https://github.com/filebrowser/filebrowser/discussions/4906). Therefore, please note the following:
 >
 > - It can take a while until someone gets back to you. Please be patient.
 > - [Issues][issues] are only being used to track bugs. Any unrelated issues will be converted into a [discussion][discussions].
 > - No new features will be implemented until further notice. The priority is on triaging issues and merge bug fixes.
 > 
 > If you're interested in maintaining this project, please reach out via the discussion above.
-[issues]: https://github.com/filebrowser/filebrowser/issues
+Please refer to our docs at [https://filebrowser.org/features](https://filebrowser.org/features)
-[discussions]: https://github.com/filebrowser/filebrowser/discussions
+
 ## Install
 For installation instructions please refer to our docs at [https://filebrowser.org/installation](https://filebrowser.org/installation).
 ## Configuration
 [Authentication Method](https://filebrowser.org/configuration/authentication-method) - You can change the way the user authenticates with the filebrowser server
 [Command Runner](https://filebrowser.org/configuration/command-runner) - The command runner is a feature that enables you to execute any shell command you want before or after a certain event.
 [Custom Branding](https://filebrowser.org/configuration/custom-branding) - You can customize your File Browser installation by change its name to any other you want, by adding a global custom style sheet and by using your own logotype if you want.
 ## Contributing
-Contributions are always welcome. To start contributing to this project, read our [guidelines](CONTRIBUTING.md) first.
+If you're interested in contributing to this project, our docs are best places to start [https://filebrowser.org/contributing](https://filebrowser.org/contributing).
 ## License
 [Apache License 2.0](LICENSE) © File Browser Contributors
--- a/SECURITY.md
+++ b/SECURITY.md
@ -12,9 +12,7 @@ currently being supported with security updates.
 ## Reporting a Vulnerability
-Vulnerabilities with critical impact should be reported on the [Security](https://github.com/filebrowser/filebrowser/security) page of this repository, which is a private way of communicating vulnerabilities to maintainers. This project is in maintenance-only mode and it can take a while until someone gets back to you.
+Vulnerabilities should be reported to filebrowser@googlegroups.com - which is a private, maintainer-only group. Maintainers will attempt to respond to/confirm reports within 2-3 days, but if you believe your report to be "critical" to user safety and security, please note as such in the subject. We have tens of thousands of users using our software, and take security vulnerabilities seriously.
 If it is not a critical vulnerability, please open an issue and we will categorize it as a security issue. By giving visibility, we can get more help from the community at fixing such issues.
 When reporting an issue, where possible, please provide at least:
@ -23,4 +21,6 @@ When reporting an issue, where possible, please provide at least:
 * Steps to reproduce
 * Your recommended remediation(s), if any.
-The File Browser team is a volunteer-only effort, and may reach back out for clarification.
+The FileBrowser team is a volunteer-only effort, and may reach back out for clarification.
 > Note: Please do not open public issues for security issues, as GitHub does not provide facility for private issues, and deleting the issue makes it hard to triage/respond back to the reporter.
--- a/auth/hook.go
+++ b/auth/hook.go
@ -2,7 +2,6 @@ package auth
 import (
 	"encoding/json"
 	"errors"
 	"fmt"
 	"log"
 	"net/http"
@ -10,7 +9,7 @@ import (
 	"os/exec"
 	"strings"
-	fbErrors "github.com/filebrowser/filebrowser/v2/errors"
+	"github.com/filebrowser/filebrowser/v2/errors"
 	"github.com/filebrowser/filebrowser/v2/files"
 	"github.com/filebrowser/filebrowser/v2/settings"
 	"github.com/filebrowser/filebrowser/v2/users"
@ -124,10 +123,10 @@ func (a *HookAuth) GetValues(s string) {
 	// iterate input lines
 	for _, val := range strings.Split(s, "\n") {
-		v := strings.SplitN(val, "=", 2)
+		v := strings.SplitN(val, "=", 2) //nolint: gomnd
 		// skips non key and value format
-		if len(v) != 2 {
+		if len(v) != 2 { //nolint: gomnd
 			continue
 		}
@ -145,12 +144,12 @@ func (a *HookAuth) GetValues(s string) {
 // SaveUser updates the existing user or creates a new one when not found
 func (a *HookAuth) SaveUser() (*users.User, error) {
 	u, err := a.Users.Get(a.Server.Root, a.Cred.Username)
-	if err != nil && !errors.Is(err, fbErrors.ErrNotExist) {
+	if err != nil && err != errors.ErrNotExist {
 		return nil, err
 	}
 	if u == nil {
-		pass, err := users.ValidateAndHashPwd(a.Cred.Password, a.Settings.MinimumPasswordLength)
+		pass, err := users.HashPwd(a.Cred.Password)
 		if err != nil {
 			return nil, err
 		}
@ -186,7 +185,7 @@ func (a *HookAuth) SaveUser() (*users.User, error) {
 		// update the password when it doesn't match the current
 		if p {
-			pass, err := users.ValidateAndHashPwd(a.Cred.Password, a.Settings.MinimumPasswordLength)
+			pass, err := users.HashPwd(a.Cred.Password)
 			if err != nil {
 				return nil, err
 			}
--- a/auth/json.go
+++ b/auth/json.go
@ -26,7 +26,7 @@ type JSONAuth struct {
 }
 // Auth authenticates the user via a json in content body.
-func (a JSONAuth) Auth(r *http.Request, usr users.Store, _ *settings.Settings, srv *settings.Server) (*users.User, error) {
+func (a JSONAuth) Auth(r *http.Request, usr users.Store, stg *settings.Settings, srv *settings.Server) (*users.User, error) {
 	var cred jsonCred
 	if r.Body == nil {
@ -39,7 +39,7 @@ func (a JSONAuth) Auth(r *http.Request, usr users.Store, _ *settings.Settings, s
 	}
 	// If ReCaptcha is enabled, check the code.
-	if a.ReCaptcha != nil && a.ReCaptcha.Secret != "" {
+	if a.ReCaptcha != nil && len(a.ReCaptcha.Secret) > 0 {
 		ok, err := a.ReCaptcha.Ok(cred.ReCaptcha) //nolint:govet
 		if err != nil {
--- a/auth/none.go
+++ b/auth/none.go
@ -14,7 +14,7 @@ const MethodNoAuth settings.AuthMethod = "noauth"
 type NoAuth struct{}
 // Auth uses authenticates user 1.
-func (a NoAuth) Auth(_ *http.Request, usr users.Store, _ *settings.Settings, srv *settings.Server) (*users.User, error) {
+func (a NoAuth) Auth(r *http.Request, usr users.Store, stg *settings.Settings, srv *settings.Server) (*users.User, error) {
 	return usr.Get(srv.Root, uint(1))
 }
--- a/auth/proxy.go
+++ b/auth/proxy.go
@ -1,10 +1,10 @@
 package auth
 import (
 	"errors"
 	"net/http"
 	"os"
-	fbErrors "github.com/filebrowser/filebrowser/v2/errors"
+	"github.com/filebrowser/filebrowser/v2/errors"
 	"github.com/filebrowser/filebrowser/v2/settings"
 	"github.com/filebrowser/filebrowser/v2/users"
 )
@ -18,50 +18,16 @@ type ProxyAuth struct {
 }
 // Auth authenticates the user via an HTTP header.
-func (a ProxyAuth) Auth(r *http.Request, usr users.Store, setting *settings.Settings, srv *settings.Server) (*users.User, error) {
+func (a ProxyAuth) Auth(r *http.Request, usr users.Store, stg *settings.Settings, srv *settings.Server) (*users.User, error) {
 	username := r.Header.Get(a.Header)
 	user, err := usr.Get(srv.Root, username)
-	if errors.Is(err, fbErrors.ErrNotExist) {
+	if err == errors.ErrNotExist {
-		return a.createUser(usr, setting, srv, username)
+		return nil, os.ErrPermission
 	}
 	return user, err
 }
 func (a ProxyAuth) createUser(usr users.Store, setting *settings.Settings, srv *settings.Server, username string) (*users.User, error) {
 	const randomPasswordLength = settings.DefaultMinimumPasswordLength + 10
 	pwd, err := users.RandomPwd(randomPasswordLength)
 	if err != nil {
 		return nil, err
 	}
 	var hashedRandomPassword string
 	hashedRandomPassword, err = users.ValidateAndHashPwd(pwd, setting.MinimumPasswordLength)
 	if err != nil {
 		return nil, err
 	}
 	user := &users.User{
 		Username:     username,
 		Password:     hashedRandomPassword,
 		LockPassword: true,
 	}
 	setting.Defaults.Apply(user)
 	var userHome string
 	userHome, err = setting.MakeUserDir(user.Username, user.Scope, srv.Root)
 	if err != nil {
 		return nil, err
 	}
 	user.Scope = userHome
 	err = usr.Save(user)
 	if err != nil {
 		return nil, err
 	}
 	return user, nil
 }
 // LoginPage tells that proxy auth doesn't require a login page.
 func (a ProxyAuth) LoginPage() bool {
 	return false
--- a/cmd/cmds_add.go
+++ b/cmd/cmds_add.go
@ -14,8 +14,8 @@ var cmdsAddCmd = &cobra.Command{
 	Use:   "add <event> <command>",
 	Short: "Add a command to run on a specific event",
 	Long:  `Add a command to run on a specific event.`,
-	Args:  cobra.MinimumNArgs(2),
+	Args:  cobra.MinimumNArgs(2), //nolint:gomnd
-	Run: python(func(_ *cobra.Command, args []string, d pythonData) {
+	Run: python(func(cmd *cobra.Command, args []string, d pythonData) {
 		s, err := d.store.Settings.Get()
 		checkErr(err)
 		command := strings.Join(args[1:], " ")
--- a/cmd/cmds_ls.go
+++ b/cmd/cmds_ls.go
@ -14,7 +14,7 @@ var cmdsLsCmd = &cobra.Command{
 	Short: "List all commands for each event",
 	Long:  `List all commands for each event.`,
 	Args:  cobra.NoArgs,
-	Run: python(func(cmd *cobra.Command, _ []string, d pythonData) {
+	Run: python(func(cmd *cobra.Command, args []string, d pythonData) {
 		s, err := d.store.Settings.Get()
 		checkErr(err)
 		evt := mustGetString(cmd.Flags(), "event")
--- a/cmd/cmds_rm.go
+++ b/cmd/cmds_rm.go
@ -23,7 +23,7 @@ You can also specify an optional parameter (index_end) so
 you can remove all commands from 'index' to 'index_end',
 including 'index_end'.`,
 	Args: func(cmd *cobra.Command, args []string) error {
-		if err := cobra.RangeArgs(2, 3)(cmd, args); err != nil {
+		if err := cobra.RangeArgs(2, 3)(cmd, args); err != nil { //nolint:gomnd
 			return err
 		}
@ -35,7 +35,7 @@ including 'index_end'.`,
 		return nil
 	},
-	Run: python(func(_ *cobra.Command, args []string, d pythonData) {
+	Run: python(func(cmd *cobra.Command, args []string, d pythonData) {
 		s, err := d.store.Settings.Get()
 		checkErr(err)
 		evt := args[0]
@ -43,7 +43,7 @@ including 'index_end'.`,
 		i, err := strconv.Atoi(args[1])
 		checkErr(err)
 		f := i
-		if len(args) == 3 {
+		if len(args) == 3 { //nolint:gomnd
 			f, err = strconv.Atoi(args[2])
 			checkErr(err)
 		}
--- a/cmd/config.go
+++ b/cmd/config.go
@ -32,7 +32,6 @@ func addConfigFlags(flags *pflag.FlagSet) {
 	addUserFlags(flags)
 	flags.BoolP("signup", "s", false, "allow users to signup")
 	flags.Bool("create-user-dir", false, "generate user's home directory automatically")
 	flags.Uint("minimum-password-length", settings.DefaultMinimumPasswordLength, "minimum password length for new users")
 	flags.String("shell", "", "shell command to which other commands should be appended")
 	flags.String("auth.method", string(auth.MethodJSONAuth), "authentication type")
@ -141,11 +140,10 @@ func getAuthentication(flags *pflag.FlagSet, defaults ...interface{}) (settings.
 }
 func printSettings(ser *settings.Server, set *settings.Settings, auther auth.Auther) {
-	w := tabwriter.NewWriter(os.Stdout, 0, 0, 2, ' ', 0)
+	w := tabwriter.NewWriter(os.Stdout, 0, 0, 2, ' ', 0) //nolint:gomnd
 	fmt.Fprintf(w, "Sign up:\t%t\n", set.Signup)
 	fmt.Fprintf(w, "Create User Dir:\t%t\n", set.CreateUserDir)
 	fmt.Fprintf(w, "Minimum Password Length:\t%d\n", set.MinimumPasswordLength)
 	fmt.Fprintf(w, "Auth method:\t%s\n", set.AuthMethod)
 	fmt.Fprintf(w, "Shell:\t%s\t\n", strings.Join(set.Shell, " "))
 	fmt.Fprintln(w, "\nBranding:")
--- a/cmd/config_cat.go
+++ b/cmd/config_cat.go
@ -13,7 +13,7 @@ var configCatCmd = &cobra.Command{
 	Short: "Prints the configuration",
 	Long:  `Prints the configuration.`,
 	Args:  cobra.NoArgs,
-	Run: python(func(_ *cobra.Command, _ []string, d pythonData) {
+	Run: python(func(cmd *cobra.Command, args []string, d pythonData) {
 		set, err := d.store.Settings.Get()
 		checkErr(err)
 		ser, err := d.store.Settings.GetServer()
--- a/cmd/config_export.go
+++ b/cmd/config_export.go
@ -15,7 +15,7 @@ var configExportCmd = &cobra.Command{
 json or yaml file. This exported configuration can be changed,
 and imported again with 'config import' command.`,
 	Args: jsonYamlArg,
-	Run: python(func(_ *cobra.Command, args []string, d pythonData) {
+	Run: python(func(cmd *cobra.Command, args []string, d pythonData) {
 		settings, err := d.store.Settings.Get()
 		checkErr(err)
--- a/cmd/config_import.go
+++ b/cmd/config_import.go
@ -34,7 +34,7 @@ database.
 The path must be for a json or yaml file.`,
 	Args: jsonYamlArg,
-	Run: python(func(_ *cobra.Command, args []string, d pythonData) {
+	Run: python(func(cmd *cobra.Command, args []string, d pythonData) {
 		var key []byte
 		if d.hadDB {
 			settings, err := d.store.Settings.Get()
@ -56,7 +56,7 @@ The path must be for a json or yaml file.`,
 		checkErr(err)
 		var rawAuther interface{}
-		if filepath.Ext(args[0]) != ".json" {
+		if filepath.Ext(args[0]) != ".json" { //nolint:goconst
 			rawAuther = cleanUpInterfaceMap(file.Auther.(map[interface{}]interface{}))
 		} else {
 			rawAuther = file.Auther
--- a/cmd/config_init.go
+++ b/cmd/config_init.go
@ -22,20 +22,19 @@ this options can be changed in the future with the command
 to the defaults when creating new users and you don't
 override the options.`,
 	Args: cobra.NoArgs,
-	Run: python(func(cmd *cobra.Command, _ []string, d pythonData) {
+	Run: python(func(cmd *cobra.Command, args []string, d pythonData) {
 		defaults := settings.UserDefaults{}
 		flags := cmd.Flags()
 		getUserDefaults(flags, &defaults, true)
 		authMethod, auther := getAuthentication(flags)
 		s := &settings.Settings{
-			Key:                   generateKey(),
+			Key:           generateKey(),
-			Signup:                mustGetBool(flags, "signup"),
+			Signup:        mustGetBool(flags, "signup"),
-			CreateUserDir:         mustGetBool(flags, "create-user-dir"),
+			CreateUserDir: mustGetBool(flags, "create-user-dir"),
-			MinimumPasswordLength: mustGetUint(flags, "minimum-password-length"),
+			Shell:         convertCmdStrToCmdArray(mustGetString(flags, "shell")),
-			Shell:                 convertCmdStrToCmdArray(mustGetString(flags, "shell")),
+			AuthMethod:    authMethod,
-			AuthMethod:            authMethod,
+			Defaults:      defaults,
 			Defaults:              defaults,
 			Branding: settings.Branding{
 				Name:                  mustGetString(flags, "branding.name"),
 				DisableExternal:       mustGetBool(flags, "branding.disableExternal"),
--- a/cmd/config_set.go
+++ b/cmd/config_set.go
@ -16,7 +16,7 @@ var configSetCmd = &cobra.Command{
 	Long: `Updates the configuration. Set the flags for the options
 you want to change. Other options will remain unchanged.`,
 	Args: cobra.NoArgs,
-	Run: python(func(cmd *cobra.Command, _ []string, d pythonData) {
+	Run: python(func(cmd *cobra.Command, args []string, d pythonData) {
 		flags := cmd.Flags()
 		set, err := d.store.Settings.Get()
 		checkErr(err)
@ -51,8 +51,6 @@ you want to change. Other options will remain unchanged.`,
 				set.Shell = convertCmdStrToCmdArray(mustGetString(flags, flag.Name))
 			case "create-user-dir":
 				set.CreateUserDir = mustGetBool(flags, flag.Name)
 			case "minimum-password-length":
 				set.MinimumPasswordLength = mustGetUint(flags, flag.Name)
 			case "branding.name":
 				set.Branding.Name = mustGetString(flags, flag.Name)
 			case "branding.color":
--- a/cmd/docs.go
+++ b/cmd/docs.go
@ -39,12 +39,12 @@ var docsCmd = &cobra.Command{
 	Use:    "docs",
 	Hidden: true,
 	Args:   cobra.NoArgs,
-	Run: func(cmd *cobra.Command, _ []string) {
+	Run: func(cmd *cobra.Command, args []string) {
 		dir := mustGetString(cmd.Flags(), "path")
 		generateDocs(rootCmd, dir)
 		names := []string{}
-		err := filepath.Walk(dir, func(_ string, info os.FileInfo, err error) error {
+		err := filepath.Walk(dir, func(path string, info os.FileInfo, err error) error {
 			if err != nil || info.IsDir() {
 				return err
 			}
@ -101,7 +101,7 @@ func generateMarkdown(cmd *cobra.Command, w io.Writer) {
 		_, _ = fmt.Fprintf(buf, "```\n%s\n```\n\n", cmd.UseLine())
 	}
-	if cmd.Example != "" {
+	if len(cmd.Example) > 0 {
 		buf.WriteString("## Examples\n\n")
 		_, _ = fmt.Fprintf(buf, "```\n%s\n```\n\n", cmd.Example)
 	}
--- a/cmd/hash.go
+++ b/cmd/hash.go
@ -17,7 +17,7 @@ var hashCmd = &cobra.Command{
 	Short: "Hashes a password",
 	Long:  `Hashes a password using bcrypt algorithm.`,
 	Args:  cobra.ExactArgs(1),
-	Run: func(_ *cobra.Command, args []string) {
+	Run: func(cmd *cobra.Command, args []string) {
 		pwd, err := users.HashPwd(args[0])
 		checkErr(err)
 		fmt.Println(pwd)
--- a/cmd/root.go
+++ b/cmd/root.go
@ -1,7 +1,6 @@
 package cmd
 import (
 	"context"
 	"crypto/tls"
 	"errors"
 	"io"
@ -14,7 +13,6 @@ import (
 	"path/filepath"
 	"strings"
 	"syscall"
 	"time"
 	homedir "github.com/mitchellh/go-homedir"
 	"github.com/spf13/afero"
@ -50,7 +48,7 @@ func init() {
 	persistent.StringP("database", "d", "./filebrowser.db", "database path")
 	flags.Bool("noauth", false, "use the noauth auther when using quick setup")
 	flags.String("username", "admin", "username for the first user when using quick config")
-	flags.String("password", "", "hashed password for the first user when using quick config")
+	flags.String("password", "", "hashed password for the first user when using quick config (default \"admin\")")
 	addServerFlags(flags)
 }
@ -63,14 +61,14 @@ func addServerFlags(flags *pflag.FlagSet) {
 	flags.StringP("key", "k", "", "tls key")
 	flags.StringP("root", "r", ".", "root to prepend to relative paths")
 	flags.String("socket", "", "socket to listen to (cannot be used with address, port, cert nor key flags)")
-	flags.Uint32("socket-perm", 0666, "unix socket file permissions")
+	flags.Uint32("socket-perm", 0666, "unix socket file permissions") //nolint:gomnd
 	flags.StringP("baseurl", "b", "", "base url")
 	flags.String("cache-dir", "", "file cache directory (disabled if empty)")
 	flags.String("token-expiration-time", "2h", "user session timeout")
-	flags.Int("img-processors", 4, "image processors count") //nolint:mnd
+	flags.Int("img-processors", 4, "image processors count") //nolint:gomnd
 	flags.Bool("disable-thumbnails", false, "disable image thumbnails")
 	flags.Bool("disable-preview-resize", false, "disable resize of image previews")
-	flags.Bool("disable-exec", true, "disables Command Runner feature")
+	flags.Bool("disable-exec", false, "disables Command Runner feature")
 	flags.Bool("disable-type-detection-by-header", false, "disables type detection by reading file headers")
 }
@ -78,7 +76,7 @@ var rootCmd = &cobra.Command{
 	Use:   "filebrowser",
 	Short: "A stylish web-based file browser",
 	Long: `File Browser CLI lets you create the database to use with File Browser,
-manage your users and all the configurations without accessing the
+manage your users and all the configurations without acessing the
 web interface.
 If you've never run File Browser, you'll need to have a database for
@ -110,9 +108,9 @@ name in caps. So to set "database" via an env variable, you should
 set FB_DATABASE.
 Also, if the database path doesn't exist, File Browser will enter into
-the quick setup mode and a new database will be bootstrapped and a new
+the quick setup mode and a new database will be bootstraped and a new
 user created with the credentials from options "username" and "password".`,
-	Run: python(func(cmd *cobra.Command, _ []string, d pythonData) {
+	Run: python(func(cmd *cobra.Command, args []string, d pythonData) {
 		log.Println(cfgFile)
 		if !d.hadDB {
@ -131,7 +129,7 @@ user created with the credentials from options "username" and "password".`,
 		cacheDir, err := cmd.Flags().GetString("cache-dir")
 		checkErr(err)
 		if cacheDir != "" {
-			if err := os.MkdirAll(cacheDir, 0700); err != nil { //nolint:govet
+			if err := os.MkdirAll(cacheDir, 0700); err != nil { //nolint:govet,gomnd
 				log.Fatalf("can't make directory %s: %s", cacheDir, err)
 			}
 			fileCache = diskcache.New(afero.NewOsFs(), cacheDir)
@ -169,6 +167,10 @@ user created with the credentials from options "username" and "password".`,
 			checkErr(err)
 		}
 		sigc := make(chan os.Signal, 1)
 		signal.Notify(sigc, os.Interrupt, syscall.SIGTERM)
 		go cleanupHandler(listener, sigc)
 		assetsFs, err := fs.Sub(frontend.Assets(), "dist")
 		if err != nil {
 			panic(err)
@ -180,74 +182,61 @@ user created with the credentials from options "username" and "password".`,
 		defer listener.Close()
 		log.Println("Listening on", listener.Addr().String())
-		srv := &http.Server{
+		//nolint: gosec
-			Handler:           handler,
+		if err := http.Serve(listener, handler); err != nil {
-			ReadHeaderTimeout: 60 * time.Second,
+			log.Fatal(err)
 		}
 		go func() {
 			if err := srv.Serve(listener); !errors.Is(err, http.ErrServerClosed) {
 				log.Fatalf("HTTP server error: %v", err)
 			}
 			log.Println("Stopped serving new connections.")
 		}()
 		sigc := make(chan os.Signal, 1)
 		signal.Notify(sigc, os.Interrupt, syscall.SIGTERM)
 		<-sigc
 		shutdownCtx, shutdownRelease := context.WithTimeout(context.Background(), 10*time.Second) //nolint:mnd
 		defer shutdownRelease()
 		if err := srv.Shutdown(shutdownCtx); err != nil {
 			log.Fatalf("HTTP shutdown error: %v", err)
 		}
 		log.Println("Graceful shutdown complete.")
 	}, pythonConfig{allowNoDB: true}),
 }
 func cleanupHandler(listener net.Listener, c chan os.Signal) { //nolint:interfacer
 	sig := <-c
 	log.Printf("Caught signal %s: shutting down.", sig)
 	listener.Close()
 	os.Exit(0)
 }
 //nolint:gocyclo
 func getRunParams(flags *pflag.FlagSet, st *storage.Storage) *settings.Server {
 	server, err := st.Settings.GetServer()
 	checkErr(err)
-	if val, set := getStringParamB(flags, "root"); set {
+	if val, set := getParamB(flags, "root"); set {
 		server.Root = val
 	}
-	if val, set := getStringParamB(flags, "baseurl"); set {
+	if val, set := getParamB(flags, "baseurl"); set {
 		server.BaseURL = val
 	}
-	if val, set := getStringParamB(flags, "log"); set {
+	if val, set := getParamB(flags, "log"); set {
 		server.Log = val
 	}
 	isSocketSet := false
 	isAddrSet := false
-	if val, set := getStringParamB(flags, "address"); set {
+	if val, set := getParamB(flags, "address"); set {
 		server.Address = val
 		isAddrSet = isAddrSet || set
 	}
-	if val, set := getStringParamB(flags, "port"); set {
+	if val, set := getParamB(flags, "port"); set {
 		server.Port = val
 		isAddrSet = isAddrSet || set
 	}
-	if val, set := getStringParamB(flags, "key"); set {
+	if val, set := getParamB(flags, "key"); set {
 		server.TLSKey = val
 		isAddrSet = isAddrSet || set
 	}
-	if val, set := getStringParamB(flags, "cert"); set {
+	if val, set := getParamB(flags, "cert"); set {
 		server.TLSCert = val
 		isAddrSet = isAddrSet || set
 	}
-	if val, set := getStringParamB(flags, "socket"); set {
+	if val, set := getParamB(flags, "socket"); set {
 		server.Socket = val
 		isSocketSet = isSocketSet || set
 	}
@ -261,69 +250,33 @@ func getRunParams(flags *pflag.FlagSet, st *storage.Storage) *settings.Server {
 		server.Socket = ""
 	}
-	disableThumbnails := getBoolParam(flags, "disable-thumbnails")
+	_, disableThumbnails := getParamB(flags, "disable-thumbnails")
 	server.EnableThumbnails = !disableThumbnails
-	disablePreviewResize := getBoolParam(flags, "disable-preview-resize")
+	_, disablePreviewResize := getParamB(flags, "disable-preview-resize")
 	server.ResizePreview = !disablePreviewResize
-	disableTypeDetectionByHeader := getBoolParam(flags, "disable-type-detection-by-header")
+	_, disableTypeDetectionByHeader := getParamB(flags, "disable-type-detection-by-header")
 	server.TypeDetectionByHeader = !disableTypeDetectionByHeader
-	disableExec := getBoolParam(flags, "disable-exec")
+	_, disableExec := getParamB(flags, "disable-exec")
 	server.EnableExec = !disableExec
-	if server.EnableExec {
+	if val, set := getParamB(flags, "token-expiration-time"); set {
 		log.Println("WARNING: Command Runner feature enabled!")
 		log.Println("WARNING: This feature has known security vulnerabilities and should not")
 		log.Println("WARNING: you fully understand the risks involved. For more information")
 		log.Println("WARNING: read https://github.com/filebrowser/filebrowser/issues/5199")
 	}
 	if val, set := getStringParamB(flags, "token-expiration-time"); set {
 		server.TokenExpirationTime = val
 	}
 	return server
 }
-// getBoolParamB returns a parameter as a string and a boolean to tell if it is different from the default
+// getParamB returns a parameter as a string and a boolean to tell if it is different from the default
 //
 // NOTE: we could simply bind the flags to viper and use IsSet.
 // Although there is a bug on Viper that always returns true on IsSet
 // if a flag is binded. Our alternative way is to manually check
 // the flag and then the value from env/config/gotten by viper.
 // https://github.com/spf13/viper/pull/331
-func getBoolParamB(flags *pflag.FlagSet, key string) (value, ok bool) {
+func getParamB(flags *pflag.FlagSet, key string) (string, bool) {
 	value, _ = flags.GetBool(key)
 	// If set on Flags, use it.
 	if flags.Changed(key) {
 		return value, true
 	}
 	// If set through viper (env, config), return it.
 	if v.IsSet(key) {
 		return v.GetBool(key), true
 	}
 	// Otherwise use default value on flags.
 	return value, false
 }
 func getBoolParam(flags *pflag.FlagSet, key string) bool {
 	val, _ := getBoolParamB(flags, key)
 	return val
 }
 // getStringParamB returns a parameter as a string and a boolean to tell if it is different from the default
 //
 // NOTE: we could simply bind the flags to viper and use IsSet.
 // Although there is a bug on Viper that always returns true on IsSet
 // if a flag is binded. Our alternative way is to manually check
 // the flag and then the value from env/config/gotten by viper.
 // https://github.com/spf13/viper/pull/331
 func getStringParamB(flags *pflag.FlagSet, key string) (string, bool) {
 	value, _ := flags.GetString(key)
 	// If set on Flags, use it.
@ -340,8 +293,8 @@ func getStringParamB(flags *pflag.FlagSet, key string) (string, bool) {
 	return value, false
 }
-func getStringParam(flags *pflag.FlagSet, key string) string {
+func getParam(flags *pflag.FlagSet, key string) string {
-	val, _ := getStringParamB(flags, key)
+	val, _ := getParamB(flags, key)
 	return val
 }
@ -365,11 +318,10 @@ func setupLog(logMethod string) {
 func quickSetup(flags *pflag.FlagSet, d pythonData) {
 	set := &settings.Settings{
-		Key:                   generateKey(),
+		Key:              generateKey(),
-		Signup:                false,
+		Signup:           false,
-		CreateUserDir:         false,
+		CreateUserDir:    false,
-		MinimumPasswordLength: settings.DefaultMinimumPasswordLength,
+		UserHomeBasePath: settings.DefaultUsersHomeBasePath,
 		UserHomeBasePath:      settings.DefaultUsersHomeBasePath,
 		Defaults: settings.UserDefaults{
 			Scope:       ".",
 			Locale:      "en",
@ -397,7 +349,7 @@ func quickSetup(flags *pflag.FlagSet, d pythonData) {
 	}
 	var err error
-	if _, noauth := getStringParamB(flags, "noauth"); noauth {
+	if _, noauth := getParamB(flags, "noauth"); noauth {
 		set.AuthMethod = auth.MethodNoAuth
 		err = d.store.Auth.Save(&auth.NoAuth{})
 	} else {
@ -410,29 +362,23 @@ func quickSetup(flags *pflag.FlagSet, d pythonData) {
 	checkErr(err)
 	ser := &settings.Server{
-		BaseURL: getStringParam(flags, "baseurl"),
+		BaseURL: getParam(flags, "baseurl"),
-		Port:    getStringParam(flags, "port"),
+		Port:    getParam(flags, "port"),
-		Log:     getStringParam(flags, "log"),
+		Log:     getParam(flags, "log"),
-		TLSKey:  getStringParam(flags, "key"),
+		TLSKey:  getParam(flags, "key"),
-		TLSCert: getStringParam(flags, "cert"),
+		TLSCert: getParam(flags, "cert"),
-		Address: getStringParam(flags, "address"),
+		Address: getParam(flags, "address"),
-		Root:    getStringParam(flags, "root"),
+		Root:    getParam(flags, "root"),
 	}
 	err = d.store.Settings.SaveServer(ser)
 	checkErr(err)
-	username := getStringParam(flags, "username")
+	username := getParam(flags, "username")
-	password := getStringParam(flags, "password")
+	password := getParam(flags, "password")
 	if password == "" {
-		var pwd string
+		password, err = users.HashPwd("admin")
 		pwd, err = users.RandomPwd(set.MinimumPasswordLength)
 		checkErr(err)
 		log.Println("Randomly generated password for user 'admin':", pwd)
 		password, err = users.ValidateAndHashPwd(pwd, set.MinimumPasswordLength)
 		checkErr(err)
 	}
@ -468,11 +414,9 @@ func initConfig() {
 	v.SetEnvPrefix("FB")
 	v.AutomaticEnv()
 	v.SetEnvKeyReplacer(strings.NewReplacer(".", "_"))
 	v.SetEnvKeyReplacer(strings.NewReplacer("-", "_"))
 	if err := v.ReadInConfig(); err != nil {
-		var configParseError v.ConfigParseError
+		if _, ok := err.(v.ConfigParseError); ok {
 		if errors.As(err, &configParseError) {
 			panic(err)
 		}
 		cfgFile = "No config file used"
--- a/cmd/rule_rm.go
+++ b/cmd/rule_rm.go
@ -28,7 +28,7 @@ You can also specify an optional parameter (index_end) so
 you can remove all commands from 'index' to 'index_end',
 including 'index_end'.`,
 	Args: func(cmd *cobra.Command, args []string) error {
-		if err := cobra.RangeArgs(1, 2)(cmd, args); err != nil {
+		if err := cobra.RangeArgs(1, 2)(cmd, args); err != nil { //nolint:gomnd
 			return err
 		}
@ -44,7 +44,7 @@ including 'index_end'.`,
 		i, err := strconv.Atoi(args[0])
 		checkErr(err)
 		f := i
-		if len(args) == 2 {
+		if len(args) == 2 { //nolint:gomnd
 			f, err = strconv.Atoi(args[1])
 			checkErr(err)
 		}
--- a/cmd/rules_ls.go
+++ b/cmd/rules_ls.go
@ -13,7 +13,7 @@ var rulesLsCommand = &cobra.Command{
 	Short: "List global rules or user specific rules",
 	Long:  `List global rules or user specific rules.`,
 	Args:  cobra.NoArgs,
-	Run: python(func(cmd *cobra.Command, _ []string, d pythonData) {
+	Run: python(func(cmd *cobra.Command, args []string, d pythonData) {
 		runRules(d.store, cmd, nil, nil)
 	}, pythonConfig{}),
 }
--- a/cmd/upgrade.go
+++ b/cmd/upgrade.go
@ -21,11 +21,11 @@ var upgradeCmd = &cobra.Command{
 import share links because they are incompatible with
 this version.`,
 	Args: cobra.NoArgs,
-	Run: func(cmd *cobra.Command, _ []string) {
+	Run: func(cmd *cobra.Command, args []string) {
 		flags := cmd.Flags()
 		oldDB := mustGetString(flags, "old.database")
 		oldConf := mustGetString(flags, "old.config")
-		err := importer.Import(oldDB, oldConf, getStringParam(flags, "database"))
+		err := importer.Import(oldDB, oldConf, getParam(flags, "database"))
 		checkErr(err)
 	},
 }
--- a/cmd/users.go
+++ b/cmd/users.go
@ -26,7 +26,7 @@ var usersCmd = &cobra.Command{
 }
 func printUsers(usrs []*users.User) {
-	w := tabwriter.NewWriter(os.Stdout, 0, 0, 2, ' ', 0)
+	w := tabwriter.NewWriter(os.Stdout, 0, 0, 2, ' ', 0) //nolint:gomnd
 	fmt.Fprintln(w, "ID\tUsername\tScope\tLocale\tV. Mode\tS.Click\tAdmin\tExecute\tCreate\tRename\tModify\tDelete\tShare\tDownload\tPwd Lock")
 	for _, u := range usrs {
--- a/cmd/users_add.go
+++ b/cmd/users_add.go
@ -15,13 +15,13 @@ var usersAddCmd = &cobra.Command{
 	Use:   "add <username> <password>",
 	Short: "Create a new user",
 	Long:  `Create a new user and add it to the database.`,
-	Args:  cobra.ExactArgs(2),
+	Args:  cobra.ExactArgs(2), //nolint:gomnd
 	Run: python(func(cmd *cobra.Command, args []string, d pythonData) {
 		s, err := d.store.Settings.Get()
 		checkErr(err)
 		getUserDefaults(cmd.Flags(), &s.Defaults, false)
-		password, err := users.ValidateAndHashPwd(args[1], s.MinimumPasswordLength)
+		password, err := users.HashPwd(args[1])
 		checkErr(err)
 		user := &users.User{
--- a/cmd/users_export.go
+++ b/cmd/users_export.go
@ -14,7 +14,7 @@ var usersExportCmd = &cobra.Command{
 	Long: `Export all users to a json or yaml file. Please indicate the
 path to the file where you want to write the users.`,
 	Args: jsonYamlArg,
-	Run: python(func(_ *cobra.Command, args []string, d pythonData) {
+	Run: python(func(cmd *cobra.Command, args []string, d pythonData) {
 		list, err := d.store.Users.Gets("")
 		checkErr(err)
--- a/cmd/users_find.go
+++ b/cmd/users_find.go
@ -26,7 +26,7 @@ var usersLsCmd = &cobra.Command{
 	Run:   findUsers,
 }
-var findUsers = python(func(_ *cobra.Command, args []string, d pythonData) {
+var findUsers = python(func(cmd *cobra.Command, args []string, d pythonData) {
 	var (
 		list []*users.User
 		user *users.User
--- a/cmd/users_import.go
+++ b/cmd/users_import.go
@ -60,7 +60,7 @@ list or set it to 0.`,
 			// User exists in DB.
 			if err == nil {
 				if !overwrite {
-					checkErr(errors.New("user " + strconv.Itoa(int(user.ID)) + " is already registered"))
+					checkErr(errors.New("user " + strconv.Itoa(int(user.ID)) + " is already registred"))
 				}
 				// If the usernames mismatch, check if there is another one in the DB
@ -84,6 +84,6 @@ list or set it to 0.`,
 }
 func usernameConflictError(username string, originalID, newID uint) error {
-	return fmt.Errorf(`can't import user with ID %d and username "%s" because the username is already registered with the user %d`,
+	return fmt.Errorf(`can't import user with ID %d and username "%s" because the username is already registred with the user %d`,
 		newID, username, originalID)
 }
--- a/cmd/users_rm.go
+++ b/cmd/users_rm.go
@ -15,7 +15,7 @@ var usersRmCmd = &cobra.Command{
 	Short: "Delete a user by username or id",
 	Long:  `Delete a user by username or id`,
 	Args:  cobra.ExactArgs(1),
-	Run: python(func(_ *cobra.Command, args []string, d pythonData) {
+	Run: python(func(cmd *cobra.Command, args []string, d pythonData) {
 		username, id := parseUsernameOrID(args[0])
 		var err error
--- a/cmd/users_update.go
+++ b/cmd/users_update.go
@ -27,10 +27,8 @@ options you want to change.`,
 		password := mustGetString(flags, "password")
 		newUsername := mustGetString(flags, "username")
 		s, err := d.store.Settings.Get()
 		checkErr(err)
 		var (
 			err  error
 			user *users.User
 		)
@ -66,7 +64,7 @@ options you want to change.`,
 		}
 		if password != "" {
-			user.Password, err = users.ValidateAndHashPwd(password, s.MinimumPasswordLength)
+			user.Password, err = users.HashPwd(password)
 			checkErr(err)
 		}
--- a/cmd/utils.go
+++ b/cmd/utils.go
@ -14,7 +14,6 @@ import (
 	"github.com/spf13/pflag"
 	yaml "gopkg.in/yaml.v2"
 	"github.com/filebrowser/filebrowser/v2/files"
 	"github.com/filebrowser/filebrowser/v2/settings"
 	"github.com/filebrowser/filebrowser/v2/storage"
 	"github.com/filebrowser/filebrowser/v2/storage/bolt"
@ -73,7 +72,7 @@ func dbExists(path string) (bool, error) {
 		d := filepath.Dir(path)
 		_, err = os.Stat(d)
 		if os.IsNotExist(err) {
-			if err := os.MkdirAll(d, 0700); err != nil { //nolint:govet
+			if err := os.MkdirAll(d, 0700); err != nil { //nolint:govet,gomnd
 				return false, err
 			}
 			return false, nil
@ -87,7 +86,7 @@ func python(fn pythonFunc, cfg pythonConfig) cobraFunc {
 	return func(cmd *cobra.Command, args []string) {
 		data := pythonData{hadDB: true}
-		path := getStringParam(cmd.Flags(), "database")
+		path := getParam(cmd.Flags(), "database")
 		absPath, err := filepath.Abs(path)
 		if err != nil {
 			panic(err)
@ -106,7 +105,7 @@ func python(fn pythonFunc, cfg pythonConfig) cobraFunc {
 		log.Println("Using database: " + absPath)
 		data.hadDB = exists
-		db, err := storm.Open(path, storm.BoltOptions(files.PermFile, nil))
+		db, err := storm.Open(path)
 		checkErr(err)
 		defer db.Close()
 		data.store, err = bolt.NewStorage(db)
@ -125,7 +124,7 @@ func marshal(filename string, data interface{}) error {
 		encoder := json.NewEncoder(fd)
 		encoder.SetIndent("", "    ")
 		return encoder.Encode(data)
-	case ".yml", ".yaml":
+	case ".yml", ".yaml": //nolint:goconst
 		encoder := yaml.NewEncoder(fd)
 		return encoder.Encode(data)
 	default:
@ -189,7 +188,7 @@ func cleanUpMapValue(v interface{}) interface{} {
 }
 // convertCmdStrToCmdArray checks if cmd string is blank (whitespace included)
-// then returns empty string array, else returns the split word array of cmd.
+// then returns empty string array, else returns the splitted word array of cmd.
 // This is to ensure the result will never be []string{""}
 func convertCmdStrToCmdArray(cmd string) []string {
 	var cmdArray []string
--- a/cmd/version.go
+++ b/cmd/version.go
@ -15,7 +15,7 @@ func init() {
 var versionCmd = &cobra.Command{
 	Use:   "version",
 	Short: "Print the version number",
-	Run: func(_ *cobra.Command, _ []string) {
+	Run: func(cmd *cobra.Command, args []string) {
 		fmt.Println("File Browser v" + version.Version + "/" + version.CommitSHA)
 	},
 }
--- a/diskcache/file_cache.go
+++ b/diskcache/file_cache.go
@ -31,24 +31,24 @@ func New(fs afero.Fs, root string) *FileCache {
 	}
 }
-func (f *FileCache) Store(_ context.Context, key string, value []byte) error {
+func (f *FileCache) Store(ctx context.Context, key string, value []byte) error {
 	mu := f.getScopedLocks(key)
 	mu.Lock()
 	defer mu.Unlock()
 	fileName := f.getFileName(key)
-	if err := f.fs.MkdirAll(filepath.Dir(fileName), 0700); err != nil {
+	if err := f.fs.MkdirAll(filepath.Dir(fileName), 0700); err != nil { //nolint:gomnd
 		return err
 	}
-	if err := afero.WriteFile(f.fs, fileName, value, 0700); err != nil {
+	if err := afero.WriteFile(f.fs, fileName, value, 0700); err != nil { //nolint:gomnd
 		return err
 	}
 	return nil
 }
-func (f *FileCache) Load(_ context.Context, key string) (value []byte, exist bool, err error) {
+func (f *FileCache) Load(ctx context.Context, key string) (value []byte, exist bool, err error) {
 	r, ok, err := f.open(key)
 	if err != nil || !ok {
 		return nil, ok, err
@ -62,7 +62,7 @@ func (f *FileCache) Load(_ context.Context, key string) (value []byte, exist boo
 	return value, true, nil
 }
-func (f *FileCache) Delete(_ context.Context, key string) error {
+func (f *FileCache) Delete(ctx context.Context, key string) error {
 	mu := f.getScopedLocks(key)
 	mu.Lock()
 	defer mu.Unlock()
--- a/diskcache/file_cache_test.go
+++ b/diskcache/file_cache_test.go
@ -40,7 +40,7 @@ func TestFileCache(t *testing.T) {
 	require.False(t, exists)
 }
-func checkValue(t *testing.T, ctx context.Context, fs afero.Fs, fileFullPath string, cache *FileCache, key, wantValue string) { //nolint:revive
+func checkValue(t *testing.T, ctx context.Context, fs afero.Fs, fileFullPath string, cache *FileCache, key, wantValue string) { //nolint:golint
 	t.Helper()
 	// check actual file content
 	b, err := afero.ReadFile(fs, fileFullPath)
--- a/diskcache/noop_cache.go
+++ b/diskcache/noop_cache.go
@ -11,14 +11,14 @@ func NewNoOp() *NoOp {
 	return &NoOp{}
 }
-func (n *NoOp) Store(_ context.Context, _ string, _ []byte) error {
+func (n *NoOp) Store(ctx context.Context, key string, value []byte) error {
 	return nil
 }
-func (n *NoOp) Load(_ context.Context, _ string) (value []byte, exist bool, err error) {
+func (n *NoOp) Load(ctx context.Context, key string) (value []byte, exist bool, err error) {
 	return nil, false, nil
 }
-func (n *NoOp) Delete(_ context.Context, _ string) error {
+func (n *NoOp) Delete(ctx context.Context, key string) error {
 	return nil
 }
--- a/docker/alpine/init.sh
+++ b/docker/alpine/init.sh
@ -1,10 +0,0 @@
 #!/bin/sh
 set -e
 # Ensure configuration exists
 if [ ! -f "/config/settings.json" ]; then
  cp -a /defaults/settings.json /config/settings.json
 fi
 exec "$@"
--- a/docker/common/healthcheck.sh
+++ b/docker/common/healthcheck.sh
@ -1,9 +0,0 @@
 #!/bin/sh
 set -e
 PORT=${FB_PORT:-$(jq -r .port /config/settings.json)}
 ADDRESS=${FB_ADDRESS:-$(jq -r .address /config/settings.json)}
 ADDRESS=${ADDRESS:-localhost}
 curl -f http://$ADDRESS:$PORT/health || exit 1
--- a/docker/common/defaults/settings.json
+++ b/docker/common/defaults/settings.json
--- a/docker/s6/custom-cont-init.d/20-config
+++ b/docker/s6/custom-cont-init.d/20-config
@ -1,6 +1,9 @@
 #!/usr/bin/with-contenv bash
-# Ensure configuration exists
+# make folders
 mkdir -p /database
 # copy config
 if [ ! -f "/config/settings.json" ]; then
  cp -a /defaults/settings.json /config/settings.json
 fi
--- a/docker/root/etc/services.d/filebrowser/run
+++ b/docker/root/etc/services.d/filebrowser/run
@ -0,0 +1,3 @@
 #!/usr/bin/with-contenv bash
 exec s6-setuidgid abc filebrowser -c /config/settings.json -d /database/filebrowser.db;
--- a/docker/s6/etc/services.d/filebrowser/run
+++ b/docker/s6/etc/services.d/filebrowser/run
@ -1,3 +0,0 @@
 #!/usr/bin/with-contenv bash
 exec s6-setuidgid abc filebrowser -c /config/settings.json;
--- a/docker_config.json
+++ b/docker_config.json
@ -3,6 +3,6 @@
  "baseURL": "",
  "address": "",
  "log": "stdout",
-  "database": "/database/filebrowser.db",
+  "database": "/database.db",
  "root": "/srv"
 }
--- a/errors/errors.go
+++ b/errors/errors.go
@ -1,16 +1,12 @@
 package errors
-import (
+import "errors"
 	"errors"
 	"fmt"
 )
 var (
 	ErrEmptyKey             = errors.New("empty key")
 	ErrExist                = errors.New("the resource already exists")
 	ErrNotExist             = errors.New("the resource does not exist")
 	ErrEmptyPassword        = errors.New("password is empty")
 	ErrEasyPassword         = errors.New("password is too easy")
 	ErrEmptyUsername        = errors.New("username is empty")
 	ErrEmptyRequest         = errors.New("empty request")
 	ErrScopeIsRelative      = errors.New("scope is a relative path")
@ -23,11 +19,3 @@ var (
 	ErrSourceIsParent       = errors.New("source is parent")
 	ErrRootUserDeletion     = errors.New("user with id 1 can't be deleted")
 )
 type ErrShortPassword struct {
 	MinimumLength uint
 }
 func (e ErrShortPassword) Error() string {
 	return fmt.Sprintf("password is too short, minimum length is %d", e.MinimumLength)
 }
--- a/files/file.go
+++ b/files/file.go
@ -6,34 +6,26 @@ import (
 	"crypto/sha256"
 	"crypto/sha512"
 	"encoding/hex"
 	"errors"
 	"hash"
 	"image"
 	"io"
 	"io/fs"
 	"log"
 	"mime"
 	"net/http"
 	"os"
 	"path"
 	"path/filepath"
 	"regexp"
 	"strings"
 	"time"
 	"github.com/spf13/afero"
-	fbErrors "github.com/filebrowser/filebrowser/v2/errors"
+	"github.com/filebrowser/filebrowser/v2/errors"
 	"github.com/filebrowser/filebrowser/v2/rules"
 )
-const PermFile = 0640
+const PermFile = 0644
-const PermDir = 0750
+const PermDir = 0755
 var (
 	reSubDirs = regexp.MustCompile("(?i)^sub(s|titles)$")
 	reSubExts = regexp.MustCompile("(?i)(.vtt|.srt|.ass|.ssa)$")
 )
 // FileInfo describes a file.
 type FileInfo struct {
@ -76,7 +68,7 @@ type ImageResolution struct {
 // NewFileInfo creates a File object from a path and a given user. This File
 // object will be automatically filled depending on if it is a directory
 // or a file. If it's a video file, it will also detect any subtitles.
-func NewFileInfo(opts *FileOptions) (*FileInfo, error) {
+func NewFileInfo(opts FileOptions) (*FileInfo, error) {
 	if !opts.Checker.Check(opts.Path) {
 		return nil, os.ErrPermission
 	}
@ -86,11 +78,6 @@ func NewFileInfo(opts *FileOptions) (*FileInfo, error) {
 		return nil, err
 	}
 	// Do not expose the name of root directory.
 	if file.Path == "/" {
 		file.Name = ""
 	}
 	if opts.Expand {
 		if file.IsDir {
 			if err := file.readListing(opts.Checker, opts.ReadHeader); err != nil { //nolint:govet
@ -108,7 +95,7 @@ func NewFileInfo(opts *FileOptions) (*FileInfo, error) {
 	return file, err
 }
-func stat(opts *FileOptions) (*FileInfo, error) {
+func stat(opts FileOptions) (*FileInfo, error) {
 	var file *FileInfo
 	if lstaterFs, ok := opts.Fs.(afero.Lstater); ok {
@ -171,7 +158,7 @@ func stat(opts *FileOptions) (*FileInfo, error) {
 // algorithm. The checksums data is saved on File object.
 func (i *FileInfo) Checksum(algo string) error {
 	if i.IsDir {
-		return fbErrors.ErrIsDirectory
+		return errors.ErrIsDirectory
 	}
 	if i.Checksums == nil {
@ -197,7 +184,7 @@ func (i *FileInfo) Checksum(algo string) error {
 	case "sha512":
 		h = sha512.New()
 	default:
-		return fbErrors.ErrInvalidOption
+		return errors.ErrInvalidOption
 	}
 	_, err = io.Copy(h, reader)
@ -222,6 +209,9 @@ func (i *FileInfo) RealPath() string {
 	return i.Path
 }
 // TODO: use constants
 //
 //nolint:goconst
 func (i *FileInfo) detectType(modify, saveContent, readHeader bool) error {
 	if IsNamedPipe(i.Mode) {
 		i.Type = "blob"
@ -287,8 +277,8 @@ func (i *FileInfo) detectType(modify, saveContent, readHeader bool) error {
 	return nil
 }
-func calculateImageResolution(fSys afero.Fs, filePath string) (*ImageResolution, error) {
+func calculateImageResolution(fs afero.Fs, filePath string) (*ImageResolution, error) {
-	file, err := fSys.Open(filePath)
+	file, err := fs.Open(filePath)
 	if err != nil {
 		return nil, err
 	}
@ -318,9 +308,9 @@ func (i *FileInfo) readFirstBytes() []byte {
 	}
 	defer reader.Close()
-	buffer := make([]byte, 512)
+	buffer := make([]byte, 512) //nolint:gomnd
 	n, err := reader.Read(buffer)
-	if err != nil && !errors.Is(err, io.EOF) {
+	if err != nil && err != io.EOF {
 		log.Print(err)
 		i.Type = "blob"
 		return nil
@ -338,6 +328,7 @@ func (i *FileInfo) detectSubtitles() {
 	ext := filepath.Ext(i.Path)
 	// detect multiple languages. Base*.vtt
 	// TODO: give subtitles descriptive names (lang) and track attributes
 	parentDir := strings.TrimRight(i.Path, i.Name)
 	var dir []os.FileInfo
 	if len(i.currentDir) > 0 {
@ -352,45 +343,12 @@ func (i *FileInfo) detectSubtitles() {
 	base := strings.TrimSuffix(i.Name, ext)
 	for _, f := range dir {
-		// load all supported subtitles from subs directories
+		if !f.IsDir() && strings.HasPrefix(f.Name(), base) && strings.HasSuffix(f.Name(), ".vtt") {
-		// should cover all instances of subtitle distributions
+			i.Subtitles = append(i.Subtitles, path.Join(parentDir, f.Name()))
 		// like tv-shows with multiple episodes in single dir
 		if f.IsDir() && reSubDirs.MatchString(f.Name()) {
 			subsDir := path.Join(parentDir, f.Name())
 			i.loadSubtitles(subsDir, base, true)
 		} else if isSubtitleMatch(f, base) {
 			i.addSubtitle(path.Join(parentDir, f.Name()))
 		}
 	}
 }
 func (i *FileInfo) loadSubtitles(subsPath, baseName string, recursive bool) {
 	dir, err := afero.ReadDir(i.Fs, subsPath)
 	if err == nil {
 		for _, f := range dir {
 			if isSubtitleMatch(f, "") {
 				i.addSubtitle(path.Join(subsPath, f.Name()))
 			} else if f.IsDir() && recursive && strings.HasPrefix(f.Name(), baseName) {
 				subsDir := path.Join(subsPath, f.Name())
 				i.loadSubtitles(subsDir, baseName, false)
 			}
 		}
 	}
 }
 func IsSupportedSubtitle(fileName string) bool {
 	return reSubExts.MatchString(fileName)
 }
 func isSubtitleMatch(f fs.FileInfo, baseName string) bool {
 	return !f.IsDir() && strings.HasPrefix(f.Name(), baseName) &&
 		IsSupportedSubtitle(f.Name())
 }
 func (i *FileInfo) addSubtitle(fPath string) {
 	i.Subtitles = append(i.Subtitles, fPath)
 }
 func (i *FileInfo) readListing(checker rules.Checker, readHeader bool) error {
 	afs := &afero.Afero{Fs: i.Fs}
 	dir, err := afs.ReadDir(i.Path)
--- a/files/listing.go
+++ b/files/listing.go
@ -16,8 +16,11 @@ type Listing struct {
 }
 // ApplySort applies the sort order using .Order and .Sort
 //
 //nolint:goconst
 func (l Listing) ApplySort() {
 	// Check '.Order' to know how to sort
 	// TODO: use enum
 	if !l.Sorting.Asc {
 		switch l.Sorting.By {
 		case "name":
--- a/files/mime.go
+++ b/files/mime.go
@ -1,609 +0,0 @@
 package files
 // This file contains code primarily sourced from::
 // github.com/kataras/iris
 import (
 	"mime"
 )
 const (
 	// ContentBinaryHeaderValue header value for binary data.
 	ContentBinaryHeaderValue = "application/octet-stream"
 	// ContentWebassemblyHeaderValue header value for web assembly files.
 	ContentWebassemblyHeaderValue = "application/wasm"
 	// ContentHTMLHeaderValue is the  string of text/html response header's content type value.
 	ContentHTMLHeaderValue = "text/html"
 	// ContentJSONHeaderValue header value for JSON data.
 	ContentJSONHeaderValue = "application/json"
 	// ContentJSONProblemHeaderValue header value for JSON API problem error.
 	// Read more at: https://tools.ietf.org/html/rfc7807
 	ContentJSONProblemHeaderValue = "application/problem+json"
 	// ContentXMLProblemHeaderValue header value for XML API problem error.
 	// Read more at: https://tools.ietf.org/html/rfc7807
 	ContentXMLProblemHeaderValue = "application/problem+xml"
 	// ContentJavascriptHeaderValue header value for JSONP & Javascript data.
 	ContentJavascriptHeaderValue = "text/javascript"
 	// ContentTextHeaderValue header value for Text data.
 	ContentTextHeaderValue = "text/plain"
 	// ContentXMLHeaderValue header value for XML data.
 	ContentXMLHeaderValue = "text/xml"
 	// ContentXMLUnreadableHeaderValue obsolete header value for XML.
 	ContentXMLUnreadableHeaderValue = "application/xml"
 	// ContentMarkdownHeaderValue custom key/content type, the real is the text/html.
 	ContentMarkdownHeaderValue = "text/markdown"
 	// ContentYAMLHeaderValue header value for YAML data.
 	ContentYAMLHeaderValue = "application/x-yaml"
 	// ContentYAMLTextHeaderValue header value for YAML plain text.
 	ContentYAMLTextHeaderValue = "text/yaml"
 	// ContentProtobufHeaderValue header value for Protobuf messages data.
 	ContentProtobufHeaderValue = "application/x-protobuf"
 	// ContentMsgPackHeaderValue header value for MsgPack data.
 	ContentMsgPackHeaderValue = "application/msgpack"
 	// ContentMsgPack2HeaderValue alternative header value for MsgPack data.
 	ContentMsgPack2HeaderValue = "application/x-msgpack"
 	// ContentFormHeaderValue header value for post form data.
 	ContentFormHeaderValue = "application/x-www-form-urlencoded"
 	// ContentFormMultipartHeaderValue header value for post multipart form data.
 	ContentFormMultipartHeaderValue = "multipart/form-data"
 	// ContentMultipartRelatedHeaderValue header value for multipart related data.
 	ContentMultipartRelatedHeaderValue = "multipart/related"
 	// ContentGRPCHeaderValue Content-Type header value for gRPC.
 	ContentGRPCHeaderValue = "application/grpc"
 )
 var types = map[string]string{
 	".3dm":       "x-world/x-3dmf",
 	".3dmf":      "x-world/x-3dmf",
 	".7z":        "application/x-7z-compressed",
 	".a":         "application/octet-stream",
 	".aab":       "application/x-authorware-bin",
 	".aam":       "application/x-authorware-map",
 	".aas":       "application/x-authorware-seg",
 	".abc":       "text/vndabc",
 	".ace":       "application/x-ace-compressed",
 	".acgi":      "text/html",
 	".afl":       "video/animaflex",
 	".ai":        "application/postscript",
 	".aif":       "audio/aiff",
 	".aifc":      "audio/aiff",
 	".aiff":      "audio/aiff",
 	".aim":       "application/x-aim",
 	".aip":       "text/x-audiosoft-intra",
 	".alz":       "application/x-alz-compressed",
 	".ani":       "application/x-navi-animation",
 	".aos":       "application/x-nokia-9000-communicator-add-on-software",
 	".aps":       "application/mime",
 	".apk":       "application/vnd.android.package-archive",
 	".arc":       "application/x-arc-compressed",
 	".arj":       "application/arj",
 	".art":       "image/x-jg",
 	".asf":       "video/x-ms-asf",
 	".asm":       "text/x-asm",
 	".asp":       "text/asp",
 	".asx":       "application/x-mplayer2",
 	".au":        "audio/basic",
 	".avi":       "video/x-msvideo",
 	".avs":       "video/avs-video",
 	".bcpio":     "application/x-bcpio",
 	".bin":       "application/mac-binary",
 	".bmp":       "image/bmp",
 	".boo":       "application/book",
 	".book":      "application/book",
 	".boz":       "application/x-bzip2",
 	".bsh":       "application/x-bsh",
 	".bz2":       "application/x-bzip2",
 	".bz":        "application/x-bzip",
 	".c++":       ContentTextHeaderValue,
 	".c":         "text/x-c",
 	".cab":       "application/vnd.ms-cab-compressed",
 	".cat":       "application/vndms-pkiseccat",
 	".cc":        "text/x-c",
 	".ccad":      "application/clariscad",
 	".cco":       "application/x-cocoa",
 	".cdf":       "application/cdf",
 	".cer":       "application/pkix-cert",
 	".cha":       "application/x-chat",
 	".chat":      "application/x-chat",
 	".chrt":      "application/vnd.kde.kchart",
 	".class":     "application/java",
 	".com":       ContentTextHeaderValue,
 	".conf":      ContentTextHeaderValue,
 	".cpio":      "application/x-cpio",
 	".cpp":       "text/x-c",
 	".cpt":       "application/mac-compactpro",
 	".crl":       "application/pkcs-crl",
 	".crt":       "application/pkix-cert",
 	".crx":       "application/x-chrome-extension",
 	".csh":       "text/x-scriptcsh",
 	".css":       "text/css",
 	".csv":       "text/csv",
 	".cxx":       ContentTextHeaderValue,
 	".dar":       "application/x-dar",
 	".dcr":       "application/x-director",
 	".deb":       "application/x-debian-package",
 	".deepv":     "application/x-deepv",
 	".def":       ContentTextHeaderValue,
 	".der":       "application/x-x509-ca-cert",
 	".dif":       "video/x-dv",
 	".dir":       "application/x-director",
 	".divx":      "video/divx",
 	".dl":        "video/dl",
 	".dmg":       "application/x-apple-diskimage",
 	".doc":       "application/msword",
 	".dot":       "application/msword",
 	".dp":        "application/commonground",
 	".drw":       "application/drafting",
 	".dump":      "application/octet-stream",
 	".dv":        "video/x-dv",
 	".dvi":       "application/x-dvi",
 	".dwf":       "drawing/x-dwf=(old)",
 	".dwg":       "application/acad",
 	".dxf":       "application/dxf",
 	".dxr":       "application/x-director",
 	".el":        "text/x-scriptelisp",
 	".elc":       "application/x-bytecodeelisp=(compiled=elisp)",
 	".eml":       "message/rfc822",
 	".env":       "application/x-envoy",
 	".eps":       "application/postscript",
 	".es":        "application/x-esrehber",
 	".etx":       "text/x-setext",
 	".evy":       "application/envoy",
 	".exe":       "application/octet-stream",
 	".f77":       "text/x-fortran",
 	".f90":       "text/x-fortran",
 	".f":         "text/x-fortran",
 	".fdf":       "application/vndfdf",
 	".fif":       "application/fractals",
 	".fli":       "video/fli",
 	".flo":       "image/florian",
 	".flv":       "video/x-flv",
 	".flx":       "text/vndfmiflexstor",
 	".fmf":       "video/x-atomic3d-feature",
 	".for":       "text/x-fortran",
 	".fpx":       "image/vndfpx",
 	".frl":       "application/freeloader",
 	".funk":      "audio/make",
 	".g3":        "image/g3fax",
 	".g":         ContentTextHeaderValue,
 	".gif":       "image/gif",
 	".gl":        "video/gl",
 	".gsd":       "audio/x-gsm",
 	".gsm":       "audio/x-gsm",
 	".gsp":       "application/x-gsp",
 	".gss":       "application/x-gss",
 	".gtar":      "application/x-gtar",
 	".gz":        "application/x-compressed",
 	".gzip":      "application/x-gzip",
 	".h":         "text/x-h",
 	".hdf":       "application/x-hdf",
 	".help":      "application/x-helpfile",
 	".hgl":       "application/vndhp-hpgl",
 	".hh":        "text/x-h",
 	".hlb":       "text/x-script",
 	".hlp":       "application/hlp",
 	".hpg":       "application/vndhp-hpgl",
 	".hpgl":      "application/vndhp-hpgl",
 	".hqx":       "application/binhex",
 	".hta":       "application/hta",
 	".htc":       "text/x-component",
 	".htm":       "text/html",
 	".html":      "text/html",
 	".htmls":     "text/html",
 	".htt":       "text/webviewhtml",
 	".htx":       "text/html",
 	".ice":       "x-conference/x-cooltalk",
 	".ico":       "image/x-icon",
 	".ics":       "text/calendar",
 	".icz":       "text/calendar",
 	".idc":       ContentTextHeaderValue,
 	".ief":       "image/ief",
 	".iefs":      "image/ief",
 	".iges":      "application/iges",
 	".igs":       "application/iges",
 	".ima":       "application/x-ima",
 	".imap":      "application/x-httpd-imap",
 	".inf":       "application/inf",
 	".ins":       "application/x-internett-signup",
 	".ip":        "application/x-ip2",
 	".isu":       "video/x-isvideo",
 	".it":        "audio/it",
 	".iv":        "application/x-inventor",
 	".ivr":       "i-world/i-vrml",
 	".ivy":       "application/x-livescreen",
 	".jam":       "audio/x-jam",
 	".jav":       "text/x-java-source",
 	".java":      "text/x-java-source",
 	".jcm":       "application/x-java-commerce",
 	".jfif-tbnl": "image/jpeg",
 	".jfif":      "image/jpeg",
 	".jnlp":      "application/x-java-jnlp-file",
 	".jpe":       "image/jpeg",
 	".jpeg":      "image/jpeg",
 	".jpg":       "image/jpeg",
 	".jps":       "image/x-jps",
 	".js":        ContentJavascriptHeaderValue,
 	".mjs":       ContentJavascriptHeaderValue,
 	".json":      ContentJSONHeaderValue,
 	".vue":       ContentJavascriptHeaderValue,
 	".jut":       "image/jutvision",
 	".kar":       "audio/midi",
 	".karbon":    "application/vnd.kde.karbon",
 	".kfo":       "application/vnd.kde.kformula",
 	".flw":       "application/vnd.kde.kivio",
 	".kml":       "application/vnd.google-earth.kml+xml",
 	".kmz":       "application/vnd.google-earth.kmz",
 	".kon":       "application/vnd.kde.kontour",
 	".kpr":       "application/vnd.kde.kpresenter",
 	".kpt":       "application/vnd.kde.kpresenter",
 	".ksp":       "application/vnd.kde.kspread",
 	".kwd":       "application/vnd.kde.kword",
 	".kwt":       "application/vnd.kde.kword",
 	".ksh":       "text/x-scriptksh",
 	".la":        "audio/nspaudio",
 	".lam":       "audio/x-liveaudio",
 	".latex":     "application/x-latex",
 	".lha":       "application/lha",
 	".lhx":       "application/octet-stream",
 	".list":      ContentTextHeaderValue,
 	".lma":       "audio/nspaudio",
 	".log":       ContentTextHeaderValue,
 	".lsp":       "text/x-scriptlisp",
 	".lst":       ContentTextHeaderValue,
 	".lsx":       "text/x-la-asf",
 	".ltx":       "application/x-latex",
 	".lzh":       "application/octet-stream",
 	".lzx":       "application/lzx",
 	".m1v":       "video/mpeg",
 	".m2a":       "audio/mpeg",
 	".m2v":       "video/mpeg",
 	".m3u":       "audio/x-mpegurl",
 	".m":         "text/x-m",
 	".man":       "application/x-troff-man",
 	".manifest":  "text/cache-manifest",
 	".map":       "application/x-navimap",
 	".mar":       ContentTextHeaderValue,
 	".mbd":       "application/mbedlet",
 	".mc$":       "application/x-magic-cap-package-10",
 	".mcd":       "application/mcad",
 	".mcf":       "text/mcf",
 	".mcp":       "application/netmc",
 	".me":        "application/x-troff-me",
 	".mht":       "message/rfc822",
 	".mhtml":     "message/rfc822",
 	".mid":       "application/x-midi",
 	".midi":      "application/x-midi",
 	".mif":       "application/x-frame",
 	".mime":      "message/rfc822",
 	".mjf":       "audio/x-vndaudioexplosionmjuicemediafile",
 	".mjpg":      "video/x-motion-jpeg",
 	".mm":        "application/base64",
 	".mme":       "application/base64",
 	".mod":       "audio/mod",
 	".moov":      "video/quicktime",
 	".mov":       "video/quicktime",
 	".movie":     "video/x-sgi-movie",
 	".mp2":       "audio/mpeg",
 	".mp3":       "audio/mpeg",
 	".mp4":       "video/mp4",
 	".mpa":       "audio/mpeg",
 	".mpc":       "application/x-project",
 	".mpe":       "video/mpeg",
 	".mpeg":      "video/mpeg",
 	".mpg":       "video/mpeg",
 	".mpga":      "audio/mpeg",
 	".mpp":       "application/vndms-project",
 	".mpt":       "application/x-project",
 	".mpv":       "application/x-project",
 	".mpx":       "application/x-project",
 	".mrc":       "application/marc",
 	".ms":        "application/x-troff-ms",
 	".mv":        "video/x-sgi-movie",
 	".my":        "audio/make",
 	".mzz":       "application/x-vndaudioexplosionmzz",
 	".nap":       "image/naplps",
 	".naplps":    "image/naplps",
 	".nc":        "application/x-netcdf",
 	".ncm":       "application/vndnokiaconfiguration-message",
 	".nif":       "image/x-niff",
 	".niff":      "image/x-niff",
 	".nix":       "application/x-mix-transfer",
 	".nsc":       "application/x-conference",
 	".nvd":       "application/x-navidoc",
 	".o":         "application/octet-stream",
 	".oda":       "application/oda",
 	".odb":       "application/vnd.oasis.opendocument.database",
 	".odc":       "application/vnd.oasis.opendocument.chart",
 	".odf":       "application/vnd.oasis.opendocument.formula",
 	".odg":       "application/vnd.oasis.opendocument.graphics",
 	".odi":       "application/vnd.oasis.opendocument.image",
 	".odm":       "application/vnd.oasis.opendocument.text-master",
 	".odp":       "application/vnd.oasis.opendocument.presentation",
 	".ods":       "application/vnd.oasis.opendocument.spreadsheet",
 	".odt":       "application/vnd.oasis.opendocument.text",
 	".oga":       "audio/ogg",
 	".ogg":       "audio/ogg",
 	".ogv":       "video/ogg",
 	".omc":       "application/x-omc",
 	".omcd":      "application/x-omcdatamaker",
 	".omcr":      "application/x-omcregerator",
 	".otc":       "application/vnd.oasis.opendocument.chart-template",
 	".otf":       "application/vnd.oasis.opendocument.formula-template",
 	".otg":       "application/vnd.oasis.opendocument.graphics-template",
 	".oth":       "application/vnd.oasis.opendocument.text-web",
 	".oti":       "application/vnd.oasis.opendocument.image-template",
 	".otm":       "application/vnd.oasis.opendocument.text-master",
 	".otp":       "application/vnd.oasis.opendocument.presentation-template",
 	".ots":       "application/vnd.oasis.opendocument.spreadsheet-template",
 	".ott":       "application/vnd.oasis.opendocument.text-template",
 	".p10":       "application/pkcs10",
 	".p12":       "application/pkcs-12",
 	".p7a":       "application/x-pkcs7-signature",
 	".p7c":       "application/pkcs7-mime",
 	".p7m":       "application/pkcs7-mime",
 	".p7r":       "application/x-pkcs7-certreqresp",
 	".p7s":       "application/pkcs7-signature",
 	".p":         "text/x-pascal",
 	".part":      "application/pro_eng",
 	".pas":       "text/pascal",
 	".pbm":       "image/x-portable-bitmap",
 	".pcl":       "application/vndhp-pcl",
 	".pct":       "image/x-pict",
 	".pcx":       "image/x-pcx",
 	".pdb":       "chemical/x-pdb",
 	".pdf":       "application/pdf",
 	".pfunk":     "audio/make",
 	".pgm":       "image/x-portable-graymap",
 	".pic":       "image/pict",
 	".pict":      "image/pict",
 	".pkg":       "application/x-newton-compatible-pkg",
 	".pko":       "application/vndms-pkipko",
 	".pl":        "text/x-scriptperl",
 	".plx":       "application/x-pixclscript",
 	".pm4":       "application/x-pagemaker",
 	".pm5":       "application/x-pagemaker",
 	".pm":        "text/x-scriptperl-module",
 	".png":       "image/png",
 	".pnm":       "application/x-portable-anymap",
 	".pot":       "application/mspowerpoint",
 	".pov":       "model/x-pov",
 	".ppa":       "application/vndms-powerpoint",
 	".ppm":       "image/x-portable-pixmap",
 	".pps":       "application/mspowerpoint",
 	".ppt":       "application/mspowerpoint",
 	".ppz":       "application/mspowerpoint",
 	".pre":       "application/x-freelance",
 	".prt":       "application/pro_eng",
 	".ps":        "application/postscript",
 	".psd":       "application/octet-stream",
 	".pvu":       "paleovu/x-pv",
 	".pwz":       "application/vndms-powerpoint",
 	".py":        "text/x-scriptphyton",
 	".pyc":       "application/x-bytecodepython",
 	".qcp":       "audio/vndqcelp",
 	".qd3":       "x-world/x-3dmf",
 	".qd3d":      "x-world/x-3dmf",
 	".qif":       "image/x-quicktime",
 	".qt":        "video/quicktime",
 	".qtc":       "video/x-qtc",
 	".qti":       "image/x-quicktime",
 	".qtif":      "image/x-quicktime",
 	".ra":        "audio/x-pn-realaudio",
 	".ram":       "audio/x-pn-realaudio",
 	".rar":       "application/x-rar-compressed",
 	".ras":       "application/x-cmu-raster",
 	".rast":      "image/cmu-raster",
 	".rexx":      "text/x-scriptrexx",
 	".rf":        "image/vndrn-realflash",
 	".rgb":       "image/x-rgb",
 	".rm":        "application/vndrn-realmedia",
 	".rmi":       "audio/mid",
 	".rmm":       "audio/x-pn-realaudio",
 	".rmp":       "audio/x-pn-realaudio",
 	".rng":       "application/ringing-tones",
 	".rnx":       "application/vndrn-realplayer",
 	".roff":      "application/x-troff",
 	".rp":        "image/vndrn-realpix",
 	".rpm":       "audio/x-pn-realaudio-plugin",
 	".rt":        "text/vndrn-realtext",
 	".rtf":       "text/richtext",
 	".rtx":       "text/richtext",
 	".rv":        "video/vndrn-realvideo",
 	".s":         "text/x-asm",
 	".s3m":       "audio/s3m",
 	".s7z":       "application/x-7z-compressed",
 	".saveme":    "application/octet-stream",
 	".sbk":       "application/x-tbook",
 	".scm":       "text/x-scriptscheme",
 	".sdml":      ContentTextHeaderValue,
 	".sdp":       "application/sdp",
 	".sdr":       "application/sounder",
 	".sea":       "application/sea",
 	".set":       "application/set",
 	".sgm":       "text/x-sgml",
 	".sgml":      "text/x-sgml",
 	".sh":        "text/x-scriptsh",
 	".shar":      "application/x-bsh",
 	".shtml":     "text/x-server-parsed-html",
 	".sid":       "audio/x-psid",
 	".skd":       "application/x-koan",
 	".skm":       "application/x-koan",
 	".skp":       "application/x-koan",
 	".skt":       "application/x-koan",
 	".sit":       "application/x-stuffit",
 	".sitx":      "application/x-stuffitx",
 	".sl":        "application/x-seelogo",
 	".smi":       "application/smil",
 	".smil":      "application/smil",
 	".snd":       "audio/basic",
 	".sol":       "application/solids",
 	".spc":       "text/x-speech",
 	".spl":       "application/futuresplash",
 	".spr":       "application/x-sprite",
 	".sprite":    "application/x-sprite",
 	".spx":       "audio/ogg",
 	".src":       "application/x-wais-source",
 	".ssi":       "text/x-server-parsed-html",
 	".ssm":       "application/streamingmedia",
 	".sst":       "application/vndms-pkicertstore",
 	".step":      "application/step",
 	".stl":       "application/sla",
 	".stp":       "application/step",
 	".sv4cpio":   "application/x-sv4cpio",
 	".sv4crc":    "application/x-sv4crc",
 	".svf":       "image/vnddwg",
 	".svg":       "image/svg+xml",
 	".svr":       "application/x-world",
 	".swf":       "application/x-shockwave-flash",
 	".t":         "application/x-troff",
 	".talk":      "text/x-speech",
 	".tar":       "application/x-tar",
 	".tbk":       "application/toolbook",
 	".tcl":       "text/x-scripttcl",
 	".tcsh":      "text/x-scripttcsh",
 	".tex":       "application/x-tex",
 	".texi":      "application/x-texinfo",
 	".texinfo":   "application/x-texinfo",
 	".text":      ContentTextHeaderValue,
 	".tgz":       "application/gnutar",
 	".tif":       "image/tiff",
 	".tiff":      "image/tiff",
 	".tr":        "application/x-troff",
 	".tsi":       "audio/tsp-audio",
 	".tsp":       "application/dsptype",
 	".tsv":       "text/tab-separated-values",
 	".turbot":    "image/florian",
 	".txt":       ContentTextHeaderValue,
 	".uil":       "text/x-uil",
 	".uni":       "text/uri-list",
 	".unis":      "text/uri-list",
 	".unv":       "application/i-deas",
 	".uri":       "text/uri-list",
 	".uris":      "text/uri-list",
 	".ustar":     "application/x-ustar",
 	".uu":        "text/x-uuencode",
 	".uue":       "text/x-uuencode",
 	".vcd":       "application/x-cdlink",
 	".vcf":       "text/x-vcard",
 	".vcard":     "text/x-vcard",
 	".vcs":       "text/x-vcalendar",
 	".vda":       "application/vda",
 	".vdo":       "video/vdo",
 	".vew":       "application/groupwise",
 	".viv":       "video/vivo",
 	".vivo":      "video/vivo",
 	".vmd":       "application/vocaltec-media-desc",
 	".vmf":       "application/vocaltec-media-file",
 	".voc":       "audio/voc",
 	".vos":       "video/vosaic",
 	".vox":       "audio/voxware",
 	".vqe":       "audio/x-twinvq-plugin",
 	".vqf":       "audio/x-twinvq",
 	".vql":       "audio/x-twinvq-plugin",
 	".vrml":      "application/x-vrml",
 	".vrt":       "x-world/x-vrt",
 	".vsd":       "application/x-visio",
 	".vst":       "application/x-visio",
 	".vsw":       "application/x-visio",
 	".w60":       "application/wordperfect60",
 	".w61":       "application/wordperfect61",
 	".w6w":       "application/msword",
 	".wav":       "audio/wav",
 	".wb1":       "application/x-qpro",
 	".wbmp":      "image/vnd.wap.wbmp",
 	".web":       "application/vndxara",
 	".wiz":       "application/msword",
 	".wk1":       "application/x-123",
 	".wmf":       "windows/metafile",
 	".wml":       "text/vnd.wap.wml",
 	".wmlc":      "application/vnd.wap.wmlc",
 	".wmls":      "text/vnd.wap.wmlscript",
 	".wmlsc":     "application/vnd.wap.wmlscriptc",
 	".word":      "application/msword",
 	".wp5":       "application/wordperfect",
 	".wp6":       "application/wordperfect",
 	".wp":        "application/wordperfect",
 	".wpd":       "application/wordperfect",
 	".wq1":       "application/x-lotus",
 	".wri":       "application/mswrite",
 	".wrl":       "application/x-world",
 	".wrz":       "model/vrml",
 	".wsc":       "text/scriplet",
 	".wsrc":      "application/x-wais-source",
 	".wtk":       "application/x-wintalk",
 	".x-png":     "image/png",
 	".xbm":       "image/x-xbitmap",
 	".xdr":       "video/x-amt-demorun",
 	".xgz":       "xgl/drawing",
 	".xif":       "image/vndxiff",
 	".xl":        "application/excel",
 	".xla":       "application/excel",
 	".xlb":       "application/excel",
 	".xlc":       "application/excel",
 	".xld":       "application/excel",
 	".xlk":       "application/excel",
 	".xll":       "application/excel",
 	".xlm":       "application/excel",
 	".xls":       "application/excel",
 	".xlt":       "application/excel",
 	".xlv":       "application/excel",
 	".xlw":       "application/excel",
 	".xm":        "audio/xm",
 	".xml":       ContentXMLHeaderValue,
 	".xmz":       "xgl/movie",
 	".xpix":      "application/x-vndls-xpix",
 	".xpm":       "image/x-xpixmap",
 	".xsr":       "video/x-amt-showrun",
 	".xwd":       "image/x-xwd",
 	".xyz":       "chemical/x-pdb",
 	".z":         "application/x-compress",
 	".zip":       "application/zip",
 	".zoo":       "application/octet-stream",
 	".zsh":       "text/x-scriptzsh",
 	".docx":      "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
 	".docm":      "application/vnd.ms-word.document.macroEnabled.12",
 	".dotx":      "application/vnd.openxmlformats-officedocument.wordprocessingml.template",
 	".dotm":      "application/vnd.ms-word.template.macroEnabled.12",
 	".xlsx":      "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
 	".xlsm":      "application/vnd.ms-excel.sheet.macroEnabled.12",
 	".xltx":      "application/vnd.openxmlformats-officedocument.spreadsheetml.template",
 	".xltm":      "application/vnd.ms-excel.template.macroEnabled.12",
 	".xlsb":      "application/vnd.ms-excel.sheet.binary.macroEnabled.12",
 	".xlam":      "application/vnd.ms-excel.addin.macroEnabled.12",
 	".pptx":      "application/vnd.openxmlformats-officedocument.presentationml.presentation",
 	".pptm":      "application/vnd.ms-powerpoint.presentation.macroEnabled.12",
 	".ppsx":      "application/vnd.openxmlformats-officedocument.presentationml.slideshow",
 	".ppsm":      "application/vnd.ms-powerpoint.slideshow.macroEnabled.12",
 	".potx":      "application/vnd.openxmlformats-officedocument.presentationml.template",
 	".potm":      "application/vnd.ms-powerpoint.template.macroEnabled.12",
 	".ppam":      "application/vnd.ms-powerpoint.addin.macroEnabled.12",
 	".sldx":      "application/vnd.openxmlformats-officedocument.presentationml.slide",
 	".sldm":      "application/vnd.ms-powerpoint.slide.macroEnabled.12",
 	".thmx":      "application/vnd.ms-officetheme",
 	".onetoc":    "application/onenote",
 	".onetoc2":   "application/onenote",
 	".onetmp":    "application/onenote",
 	".onepkg":    "application/onenote",
 	".xpi":       "application/x-xpinstall",
 	".wasm":      "application/wasm",
 	".m4a":       "audio/mp4",
 	".flac":      "audio/x-flac",
 	".amr":       "audio/amr",
 	".aac":       "audio/aac",
 	".opus":      "video/ogg",
 	".m4v":       "video/mp4",
 	".mkv":       "video/x-matroska",
 	".caf":       "audio/x-caf",
 	".m3u8":      "application/x-mpegURL",
 	".mpd":       "application/dash+xml",
 	".webp":      "image/webp",
 	".epub":      "application/epub+zip",
 }
 //nolint:gochecknoinits
 func init() {
 	for ext, typ := range types {
 		// skip errors
 		_ = mime.AddExtensionType(ext, typ)
 	}
 }
--- a/fileutils/file.go
+++ b/fileutils/file.go
@ -98,7 +98,7 @@ func CommonPrefix(sep byte, paths ...string) string {
 	// (e.g. /home/user1, /home/user1/foo, /home/user1/bar).
 	// path.Clean will have cleaned off trailing / separators with
 	// the exception of the root directory, "/" (in which case we
-	// make it "//", but this will get fixed up to "/" below).
+	// make it "//", but this will get fixed up to "/" bellow).
 	c = append(c, sep)
 	// Ignore the first path since it's already in c
--- a/frontend/.eslintrc.json
+++ b/frontend/.eslintrc.json
@ -0,0 +1,20 @@
 {
  "root": true,
  "env": {
    "node": true
  },
  "extends": [
    "plugin:vue/essential",
    "eslint:recommended",
    "@vue/eslint-config-prettier"
  ],
  "rules": {
    "vue/multi-word-component-names": "off",
    "vue/no-reserved-component-names": "warn",
    "vue/no-mutating-props": "warn"
  },
  "parserOptions": {
    "ecmaVersion": "latest",
    "sourceType": "module"
  }
 }
--- a/frontend/.prettierignore
+++ b/frontend/.prettierignore
@ -1,3 +1,2 @@
 # Ignore artifacts:
 dist
 pnpm-lock.yaml
--- a/frontend/env.d.ts
+++ b/frontend/env.d.ts
@ -1 +0,0 @@
 /// <reference types="vite/client" />
--- a/frontend/eslint.config.js
+++ b/frontend/eslint.config.js
@ -1,38 +0,0 @@
 import pluginVue from "eslint-plugin-vue";
 import vueTsEslintConfig from "@vue/eslint-config-typescript";
 import prettierConfig from "@vue/eslint-config-prettier";
 export default [
  {
    name: "app/files-to-lint",
    files: ["**/*.{ts,mts,tsx,vue}"],
  },
  {
    name: "app/files-to-ignore",
    ignores: ["**/dist/**", "**/dist-ssr/**", "**/coverage/**"],
  },
  ...pluginVue.configs["flat/essential"],
  ...vueTsEslintConfig(),
  prettierConfig,
  {
    rules: {
      // Note: you must disable the base rule as it can report incorrect errors
      "no-unused-expressions": "off",
      "@typescript-eslint/no-unused-expressions": "off",
      // TODO: theres too many of these from before ts
      "@typescript-eslint/no-explicit-any": "off",
      // TODO: finish the ts conversion
      "vue/block-lang": "off",
      "vue/multi-word-component-names": "off",
      "vue/no-mutating-props": [
        "error",
        {
          shallowOnly: true,
        },
      ],
    },
  },
 ];
--- a/frontend/index.html
+++ b/frontend/index.html
@ -10,10 +10,18 @@
    <title>File Browser</title>
-    <link rel="icon" type="image/svg+xml" href="/img/icons/favicon.svg" />
+    <link
-    <link rel="shortcut icon" href="/img/icons/favicon.ico" />
+      rel="icon"
-    <link rel="apple-touch-icon" sizes="180x180" href="/img/icons/apple-touch-icon.png" />
+      type="image/png"
-    <meta name="apple-mobile-web-app-title" content="File Browser" />
+      sizes="32x32"
      href="/img/icons/favicon-32x32.png"
    />
    <link
      rel="icon"
      type="image/png"
      sizes="16x16"
      href="/img/icons/favicon-16x16.png"
    />
    <!-- Add to home screen for Android and modern mobile browsers -->
    <link
@ -23,6 +31,19 @@
    />
    <meta name="theme-color" content="#2979ff" />
    <!-- Add to home screen for Safari on iOS/iPadOS -->
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black" />
    <meta name="apple-mobile-web-app-title" content="assets" />
    <link rel="apple-touch-icon" href="/img/icons/apple-touch-icon.png" />
    <!-- Add to home screen for Windows -->
    <meta
      name="msapplication-TileImage"
      content="/img/icons/mstile-144x144.png"
    />
    <meta name="msapplication-TileColor" content="#2979ff" />
    <!-- Inject Some Variables and generate the manifest json -->
    <script>
      // We can assign JSON directly
@ -166,6 +187,6 @@
      </div>
    </div>
-    <script type="module" src="/src/main.ts"></script>
+    <script type="module" src="/src/main.js"></script>
  </body>
 </html>
--- a/frontend/jsconfig.json
+++ b/frontend/jsconfig.json
@ -0,0 +1,10 @@
 {
  "compilerOptions": {
    "baseUrl": ".",
    "paths": {
      "@/*": ["./src/*"]
    }
  },
  "include": ["src/**/*"],
  "exclude": ["node_modules", "dist"]
 }
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
--- a/frontend/package.json
+++ b/frontend/package.json
@ -1,78 +1,64 @@
 {
  "name": "filebrowser-frontend",
-  "version": "3.0.0",
+  "version": "2.0.0",
  "private": true,
  "type": "module",
  "engines": {
    "node": ">=22.0.0",
    "pnpm": ">=9.0.0"
  },
  "scripts": {
    "dev": "vite dev",
-    "build": "pnpm run typecheck && vite build",
+    "serve": "vite serve",
    "build": "vite build",
    "watch": "vite build --watch",
    "clean": "find ./dist -maxdepth 1 -mindepth 1 ! -name '.gitkeep' -exec rm -r {} +",
-    "typecheck": "vue-tsc -p ./tsconfig.tsc.json --noEmit",
+    "lint": "eslint --ext .vue,.js src/",
-    "lint": "eslint src/",
+    "lint:fix": "eslint --ext .vue,.js --fix src/",
-    "lint:fix": "eslint --fix src/",
+    "format": "prettier --write ."
    "format": "prettier --write .",
    "test": "playwright test"
  },
  "dependencies": {
-    "@chenfengyuan/vue-number-input": "^2.0.1",
+    "ace-builds": "^1.23.4",
-    "@vueuse/core": "^12.5.0",
+    "clipboard": "^2.0.11",
-    "@vueuse/integrations": "^12.5.0",
+    "core-js": "^3.32.0",
-    "ace-builds": "^1.37.5",
+    "css-vars-ponyfill": "^2.4.8",
-    "core-js": "^3.40.0",
+    "filesize": "^10.0.8",
-    "dayjs": "^1.11.10",
+    "js-base64": "^3.7.5",
-    "dompurify": "^3.2.6",
+    "lodash.clonedeep": "^4.5.0",
-    "epubjs": "^0.3.93",
+    "lodash.throttle": "^4.1.1",
-    "filesize": "^10.1.1",
+    "material-icons": "^1.13.9",
-    "js-base64": "^3.7.7",
+    "moment": "^2.29.4",
    "jwt-decode": "^4.0.0",
    "lodash-es": "^4.17.21",
    "marked": "^15.0.6",
    "material-icons": "^1.13.13",
    "normalize.css": "^8.0.1",
-    "pinia": "^2.3.1",
+    "noty": "^3.2.0-beta",
    "pretty-bytes": "^6.1.1",
-    "qrcode.vue": "^3.4.1",
+    "qrcode.vue": "^1.7.0",
-    "tus-js-client": "^4.3.1",
+    "tus-js-client": "^3.1.1",
    "utif": "^3.1.0",
-    "video.js": "^8.21.0",
+    "vue": "^2.7.14",
-    "videojs-hotkeys": "^0.2.28",
+    "vue-async-computed": "^3.9.0",
-    "videojs-mobile-ui": "^1.1.1",
+    "vue-i18n": "^8.28.2",
-    "vue": "^3.4.21",
+    "vue-lazyload": "^1.3.5",
-    "vue-final-modal": "^4.5.4",
+    "vue-router": "^3.6.5",
-    "vue-i18n": "^11.1.2",
+    "vue-simple-progress": "^1.1.1",
-    "vue-lazyload": "^3.0.0",
+    "vuex": "^3.6.2",
-    "vue-reader": "^1.2.17",
+    "vuex-router-sync": "^5.0.0",
-    "vue-router": "^4.3.0",
+    "whatwg-fetch": "^3.6.17"
    "vue-toastification": "^2.0.0-rc.5"
  },
  "devDependencies": {
-    "@intlify/unplugin-vue-i18n": "^6.0.3",
+    "@vitejs/plugin-legacy": "^4.1.1",
-    "@playwright/test": "^1.50.0",
+    "@vitejs/plugin-vue2": "^2.2.0",
-    "@tsconfig/node22": "^22.0.0",
+    "@vue/eslint-config-prettier": "^8.0.0",
-    "@types/lodash-es": "^4.17.12",
+    "autoprefixer": "^10.4.14",
-    "@types/node": "^22.10.10",
+    "eslint": "^8.46.0",
-    "@typescript-eslint/eslint-plugin": "^8.21.0",
+    "eslint-plugin-prettier": "^5.0.0",
-    "@vitejs/plugin-legacy": "^6.0.0",
+    "eslint-plugin-vue": "^9.16.1",
-    "@vitejs/plugin-vue": "^5.0.4",
+    "jsdom": "^22.1.0",
-    "@vue/eslint-config-prettier": "^10.2.0",
+    "postcss": "^8.4.31",
-    "@vue/eslint-config-typescript": "^14.3.0",
+    "prettier": "^3.0.1",
-    "@vue/tsconfig": "^0.7.0",
+    "terser": "^5.19.2",
-    "autoprefixer": "^10.4.19",
+    "vite": "^4.5.2",
-    "concurrently": "^9.1.2",
+    "vite-plugin-compression2": "^0.10.3",
-    "eslint": "^9.19.0",
+    "vite-plugin-rewrite-all": "^1.0.1"
    "eslint-plugin-prettier": "^5.2.3",
    "eslint-plugin-vue": "^9.24.0",
    "jsdom": "^26.0.0",
    "postcss": "^8.5.1",
    "prettier": "^3.4.2",
    "terser": "^5.37.0",
    "vite": "^6.1.6",
    "vite-plugin-compression2": "^1.0.0",
    "vue-tsc": "^2.2.0"
  },
-  "packageManager": "pnpm@9.15.4+sha512.b2dc20e2fc72b3e18848459b37359a32064663e5627a51e4c74b2c29dd8e8e0491483c3abb40789cfd578bf362fb6ba8261b05f0387d76792ed6e23ea3b1b6a0"
+  "browserslist": [
    "> 1%",
    "last 2 versions",
    "not ie < 11"
  ]
 }
--- a/frontend/playwright.config.ts
+++ b/frontend/playwright.config.ts
@ -1,80 +0,0 @@
 import { defineConfig, devices } from "@playwright/test";
 /**
 * Read environment variables from file.
 * https://github.com/motdotla/dotenv
 */
 // require('dotenv').config();
 /**
 * See https://playwright.dev/docs/test-configuration.
 */
 export default defineConfig({
  testDir: "./tests",
  /* Run tests in files in parallel */
  fullyParallel: true,
  /* Fail the build on CI if you accidentally left test.only in the source code. */
  forbidOnly: !!process.env.CI,
  /* Retry on CI only */
  retries: process.env.CI ? 2 : 0,
  /* Opt out of parallel tests on CI. */
  workers: process.env.CI ? 1 : undefined,
  /* Reporter to use. See https://playwright.dev/docs/test-reporters */
  reporter: "html",
  /* Shared settings for all the projects below. See https://playwright.dev/docs/api/class-testoptions. */
  use: {
    /* Base URL to use in actions like `await page.goto('/')`. */
    baseURL: "http://127.0.0.1:5173",
    /* Collect trace when retrying the failed test. See https://playwright.dev/docs/trace-viewer */
    trace: "on-first-retry",
    /* Set default locale to English (US) */
    locale: "en-US",
  },
  /* Configure projects for major browsers */
  projects: [
    {
      name: "chromium",
      use: { ...devices["Desktop Chrome"] },
    },
    {
      name: "firefox",
      use: { ...devices["Desktop Firefox"] },
    },
    // {
    //   name: "webkit",
    //   use: { ...devices["Desktop Safari"] },
    // },
    /* Test against mobile viewports. */
    // {
    //   name: 'Mobile Chrome',
    //   use: { ...devices['Pixel 5'] },
    // },
    // {
    //   name: 'Mobile Safari',
    //   use: { ...devices['iPhone 12'] },
    // },
    /* Test against branded browsers. */
    // {
    //   name: 'Microsoft Edge',
    //   use: { ...devices['Desktop Edge'], channel: 'msedge' },
    // },
    // {
    //   name: 'Google Chrome',
    //   use: { ...devices['Desktop Chrome'], channel: 'chrome' },
    // },
  ],
  /* Run your local dev server before starting the tests */
  webServer: {
    command: "npm run dev",
    url: "http://127.0.0.1:5173",
    reuseExistingServer: !process.env.CI,
  },
 });
--- a/frontend/pnpm-lock.yaml
+++ b/frontend/pnpm-lock.yaml
--- a/frontend/public/img/icons/apple-touch-icon.png
+++ b/frontend/public/img/icons/apple-touch-icon.png
--- a/frontend/public/img/icons/browserconfig.xml
+++ b/frontend/public/img/icons/browserconfig.xml
@ -0,0 +1,9 @@
 <?xml version="1.0" encoding="utf-8"?>
 <browserconfig>
    <msapplication>
        <tile>
            <square150x150logo src="/mstile-150x150.png"/>
            <TileColor>#455a64</TileColor>
        </tile>
    </msapplication>
 </browserconfig>
--- a/frontend/public/img/icons/favicon-16x16.png
+++ b/frontend/public/img/icons/favicon-16x16.png
--- a/frontend/public/img/icons/favicon-32x32.png
+++ b/frontend/public/img/icons/favicon-32x32.png
--- a/frontend/public/img/icons/favicon.ico
+++ b/frontend/public/img/icons/favicon.ico
--- a/frontend/public/img/icons/favicon.svg
+++ b/frontend/public/img/icons/favicon.svg
--- a/frontend/public/img/icons/mstile-144x144.png
+++ b/frontend/public/img/icons/mstile-144x144.png
--- a/frontend/public/img/icons/mstile-150x150.png
+++ b/frontend/public/img/icons/mstile-150x150.png
--- a/frontend/public/img/icons/mstile-310x150.png
+++ b/frontend/public/img/icons/mstile-310x150.png
--- a/frontend/public/img/icons/mstile-310x310.png
+++ b/frontend/public/img/icons/mstile-310x310.png
--- a/frontend/public/img/icons/mstile-70x70.png
+++ b/frontend/public/img/icons/mstile-70x70.png
--- a/frontend/public/img/icons/safari-pinned-tab.svg
+++ b/frontend/public/img/icons/safari-pinned-tab.svg
@ -0,0 +1,42 @@
 <?xml version="1.0" standalone="no"?>
 <!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 20010904//EN"
 "http://www.w3.org/TR/2001/REC-SVG-20010904/DTD/svg10.dtd">
 <svg version="1.0" xmlns="http://www.w3.org/2000/svg"
 width="700.000000pt" height="700.000000pt" viewBox="0 0 700.000000 700.000000"
 preserveAspectRatio="xMidYMid meet">
 <metadata>
 Created by potrace 1.11, written by Peter Selinger 2001-2013
 </metadata>
 <g transform="translate(0.000000,700.000000) scale(0.100000,-0.100000)"
 fill="#000000" stroke="none">
 <path d="M3245 6989 c-522 -39 -1042 -197 -1480 -449 -849 -488 -1459 -1308
 -1673 -2250 -177 -776 -89 -1582 250 -2301 368 -778 1052 -1418 1857 -1739
 903 -359 1927 -325 2812 92 778 368 1418 1052 1739 1857 359 903 325 1927 -92
 2812 -296 627 -806 1175 -1423 1529 -587 338 -1308 500 -1990 449z m555 -580
 c519 -51 1018 -245 1446 -565 788 -588 1229 -1526 1174 -2496 -16 -277 -58
 -500 -145 -763 -144 -440 -378 -819 -710 -1150 -452 -452 -1005 -730 -1655
 -832 -91 -14 -175 -18 -405 -18 -304 0 -369 6 -595 51 -1105 223 -1999 1092
 -2259 2197 -52 221 -73 412 -73 667 0 397 64 732 204 1080 304 752 886 1334
 1638 1638 431 174 895 238 1380 191z"/>
 <path d="M2670 5215 c0 -13 -44 -15 -335 -15 -352 0 -383 -3 -399 -45 -3 -9
 -6 -758 -6 -1663 0 -1168 -3 -1643 -11 -1632 -8 11 -9 8 -4 -15 3 -16 17 -41
 31 -55 l24 -25 1530 0 1530 0 24 25 c14 14 26 36 27 50 1 14 1 711 1 1550 l-2
 1526 -228 142 -229 142 -136 0 -137 0 0 -600 0 -600 -705 0 -705 0 0 615 0
 615 -135 0 c-113 0 -135 -2 -135 -15z m-264 -190 c57 -29 89 -71 103 -137 35
 -154 -98 -282 -258 -247 -55 12 -122 62 -148 113 -36 69 -12 186 49 243 62 58
 170 70 254 28z m2316 -1702 c17 -15 18 -49 18 -670 l0 -653 -1245 0 -1245 0 0
 654 c0 582 2 656 16 670 14 14 139 16 1226 16 1113 0 1213 -1 1230 -17z
 m-2602 -1363 c40 -40 13 -100 -43 -100 -60 0 -88 59 -47 100 11 11 31 20 45
 20 14 0 34 -9 45 -20z m2840 0 c41 -41 11 -100 -52 -100 -35 0 -58 24 -58 60
 0 54 71 79 110 40z"/>
 <path d="M2431 3091 c-7 -13 -7 -23 2 -35 11 -15 97 -16 1067 -14 l1055 3 0
 30 0 30 -1057 3 c-1023 2 -1058 1 -1067 -17z"/>
 <path d="M2436 2675 c-19 -19 -11 -41 17 -49 41 -11 2067 -7 2088 4 23 13 25
 46 3 54 -9 3 -483 6 -1054 6 -919 0 -1040 -2 -1054 -15z"/>
 <path d="M2447 2273 c-14 -4 -17 -13 -15 -36 l3 -32 1049 -3 c767 -1 1052 1
 1062 9 20 16 17 47 -5 59 -20 10 -2055 13 -2094 3z"/>
 <path d="M3822 5027 c-21 -23 -22 -30 -22 -293 0 -258 1 -271 20 -292 27 -29
 56 -35 140 -30 56 3 75 8 93 26 22 22 22 26 22 298 l0 276 -24 19 c-19 16 -40
 19 -115 19 -84 0 -95 -2 -114 -23z"/>
 </g>
 </svg>
--- a/frontend/public/index.html
+++ b/frontend/public/index.html
@ -16,12 +16,20 @@
      [{[ if .Name -]}][{[ .Name ]}][{[ else ]}]File Browser[{[ end ]}]
    </title>
-    <meta name="robots" content="noindex,nofollow" />
+    <meta name="robots" content="noindex,nofollow">
-    <link rel="icon" type="image/svg+xml" href="[{[ .StaticURL ]}]/img/icons/favicon.svg" />
+    <link
-    <link rel="shortcut icon" href="[{[ .StaticURL ]}]/img/icons/favicon.ico" />
+      rel="icon"
-    <link rel="apple-touch-icon" sizes="180x180" href="[{[ .StaticURL ]}]/img/icons/apple-touch-icon.png" />
+      type="image/png"
-    <meta name="apple-mobile-web-app-title" content="File Browser" />
+      sizes="32x32"
      href="[{[ .StaticURL ]}]/img/icons/favicon-32x32.png"
    />
    <link
      rel="icon"
      type="image/png"
      sizes="16x16"
      href="[{[ .StaticURL ]}]/img/icons/favicon-16x16.png"
    />
    <!-- Add to home screen for Android and modern mobile browsers -->
    <link
@ -34,6 +42,25 @@
      content="[{[ if .Color -]}][{[ .Color ]}][{[ else ]}]#2979ff[{[ end ]}]"
    />
    <!-- Add to home screen for Safari on iOS/iPadOS -->
    <meta name="apple-mobile-web-app-capable" content="yes" />
    <meta name="apple-mobile-web-app-status-bar-style" content="black" />
    <meta name="apple-mobile-web-app-title" content="assets" />
    <link
      rel="apple-touch-icon"
      href="[{[ .StaticURL ]}]/img/icons/apple-touch-icon.png"
    />
    <!-- Add to home screen for Windows -->
    <meta
      name="msapplication-TileImage"
      content="[{[ .StaticURL ]}]/img/icons/mstile-144x144.png"
    />
    <meta
      name="msapplication-TileColor"
      content="[{[ if .Color -]}][{[ .Color ]}][{[ else ]}]#2979ff[{[ end ]}]"
    />
    <!-- Inject Some Variables and generate the manifest json -->
    <script>
      // We can assign JSON directly
@ -154,9 +181,14 @@
      </div>
    </div>
-    <script type="module" src="/src/main.ts"></script>
+    <script type="module" src="/src/main.js"></script>
-    [{[ if .CSS -]}]
+    [{[ if .Theme -]}]
    <link
      rel="stylesheet"
      href="[{[ .StaticURL ]}]/themes/[{[ .Theme ]}].css"
    />
    [{[ end ]}] [{[ if .CSS -]}]
    <link rel="stylesheet" href="[{[ .StaticURL ]}]/custom.css" />
    [{[ end ]}]
  </body>
--- a/frontend/public/themes/dark.css
+++ b/frontend/public/themes/dark.css
@ -0,0 +1,217 @@
 :root {
  --background: #141D24;
  --surfacePrimary: #20292F;
  --surfaceSecondary: #3A4147;
  --divider: rgba(255, 255, 255, 0.12);
  --icon: #ffffff;
  --textPrimary: rgba(255, 255, 255, 0.87);
  --textSecondary: rgba(255, 255, 255, 0.6);
 }
 body {
  background: var(--background);
  color: var(--textPrimary);
 }
 #loading {
  background: var(--background);
 }
 #loading .spinner div, main .spinner div {
  background: var(--icon);
 }
 #login {
  background: var(--background);
 }
 header {
  background: var(--surfacePrimary);
 }
 #search #input {
  background: var(--surfaceSecondary);
  border-color: var(--surfacePrimary);
 }
 #search #input input::placeholder {
  color: var(--textSecondary);
 }
 #search.active #input {
  background: var(--surfacePrimary);
 }
 #search.active input {
  color: var(--textPrimary);
 }
 #search #result {
  background: var(--background);
  color: var(--textPrimary);
 }
 #search .boxes {
  background: var(--surfaceSecondary);
 }
 #search .boxes h3 {
  color: var(--textPrimary);
 }
 .action {
  color: var(--textPrimary) !important;
 }
 .action:hover {
  background-color: rgba(255, 255, 255, .1);
 }
 .action i {
  color: var(--icon) !important;
 }
 .action .counter {
  border-color: var(--surfacePrimary);
 }
 nav > div {
  border-color: var(--divider);
 }
 .breadcrumbs {
  border-color: var(--divider);
  color: var(--textPrimary) !important;
 }
 .breadcrumbs span {
  color: var(--textPrimary) !important;
 }
 .breadcrumbs a:hover {
  background-color: rgba(255, 255, 255, .1);
 }
 #listing .item {
  background: var(--surfacePrimary);
  color: var(--textPrimary);
  border-color: var(--divider) !important;
 }
 #listing .item i {
  color: var(--icon);
 }
 #listing .item .modified {
  color: var(--textSecondary);
 }
 #listing h2,
 #listing.list .header span {
  color: var(--textPrimary) !important;
 }
 #listing.list .header span {
  color: var(--textPrimary);
 }
 #listing.list .header i {
  color: var(--icon);
 }
 #listing.list .item.header {
  background: var(--background);
 }
 .message {
  color: var(--textPrimary);
 }
 .card {
  background: var(--surfacePrimary);
  color: var(--textPrimary);
 }
 .button--flat:hover {
  background: var(--surfaceSecondary);
 }
 .dashboard #nav ul li {
  color: var(--textSecondary);
 }
 .dashboard #nav ul li:hover {
  background: var(--surfaceSecondary);
 }
 .card h3,
 .dashboard #nav,
 .dashboard p label {
  color: var(--textPrimary);
 }
 .card#share input,
 .card#share select,
 .input {
  background: var(--surfaceSecondary);
  color: var(--textPrimary);
  border: 1px solid rgba(255, 255, 255, 0.05);
 }
 .input:hover,
 .input:focus {
  border-color: rgba(255, 255, 255, 0.15);
 }
 .input--red {
  background: #73302D;
 }
 .input--green {
  background: #147A41;
 }
 .dashboard #nav .wrapper,
 .collapsible {
  border-color: var(--divider);
 }
 .collapsible > label * {
  color: var(--textPrimary);
 }
 table th {
  color: var(--textSecondary);
 }
 .file-list li:hover {
  background: var(--surfaceSecondary);
 }
 .file-list li:before {
  color: var(--textSecondary);
 }
 .file-list li[aria-selected=true]:before {
  color: var(--icon);
 }
 .shell {
  background: var(--surfacePrimary);
  color: var(--textPrimary);
 }
 .shell__divider {
  background: rgba(255, 255, 255, 0.1);
 }
 .shell__divider:hover {
  background: rgba(255, 255, 255, 0.4);
 }
 .shell__result {
  border-top: 1px solid var(--divider);
 }
 #editor-container {
  background: var(--background);
 }
 #editor-container .bar {
  background: var(--surfacePrimary);
 }
@media (max-width: 736px) {
  #file-selection {
    background: var(--surfaceSecondary) !important;
  }
  #file-selection span {
    color: var(--textPrimary) !important;
  }
  nav {
    background: var(--surfaceSecondary) !important;
  }
  #dropdown {
    background: var(--surfaceSecondary) !important;
  }
 }
 .share__box {
  background: var(--surfacePrimary) !important;
  color: var(--textPrimary);
 }
 .share__box__element {
  border-top-color: var(--divider);
 }
--- a/frontend/src/App.vue
+++ b/frontend/src/App.vue
@ -4,30 +4,23 @@
  </div>
 </template>
-<script setup lang="ts">
+<script>
-import { ref, onMounted, watch } from "vue";
+// eslint-disable-next-line no-undef
-import { useI18n } from "vue-i18n";
+// __webpack_public_path__ = window.FileBrowser.StaticURL + "/";
 import { setHtmlLocale } from "./i18n";
 import { getMediaPreference, getTheme, setTheme } from "./utils/theme";
-const { locale } = useI18n();
+export default {
  name: "app",
  mounted() {
    const loading = document.getElementById("loading");
    loading.classList.add("done");
-const userTheme = ref<UserTheme>(getTheme() || getMediaPreference());
+    setTimeout(function () {
-
+      loading.parentNode.removeChild(loading);
-onMounted(() => {
+    }, 200);
-  setTheme(userTheme.value);
+  },
-  setHtmlLocale(locale.value);
+};
  // this might be null during HMR
  const loading = document.getElementById("loading");
  loading?.classList.add("done");
  setTimeout(function () {
    loading?.parentNode?.removeChild(loading);
  }, 200);
 });
 // handles ltr/rtl changes
 watch(locale, (newValue) => {
  newValue && setHtmlLocale(newValue);
 });
 </script>
 <style>
@import "./css/styles.css";
 </style>
--- a/frontend/src/api/commands.js
+++ b/frontend/src/api/commands.js
@ -1,19 +1,15 @@
 import { baseURL } from "@/utils/constants";
 import { removePrefix } from "./utils";
 import { baseURL } from "@/utils/constants";
 import store from "@/store";
 const ssl = window.location.protocol === "https:";
 const protocol = ssl ? "wss:" : "ws:";
-export default function command(
+export default function command(url, command, onmessage, onclose) {
  url: string,
  command: string,
  onmessage: WebSocket["onmessage"],
  onclose: WebSocket["onclose"]
 ) {
  url = removePrefix(url);
-  url = `${protocol}//${window.location.host}${baseURL}/api/command${url}`;
+  url = `${protocol}//${window.location.host}${baseURL}/api/command${url}?auth=${store.state.jwt}`;
-  const conn = new window.WebSocket(url);
+  let conn = new window.WebSocket(url);
  conn.onopen = () => conn.send(command);
  conn.onmessage = onmessage;
  conn.onclose = onclose;
--- a/frontend/src/api/files.js
+++ b/frontend/src/api/files.js
@ -1,29 +1,19 @@
-import { useAuthStore } from "@/stores/auth";
+import { createURL, fetchURL, removePrefix } from "./utils";
 import { useLayoutStore } from "@/stores/layout";
 import { baseURL } from "@/utils/constants";
 import store from "@/store";
 import { upload as postTus, useTus } from "./tus";
 import { createURL, fetchURL, removePrefix, StatusError } from "./utils";
-export async function fetch(url: string, signal?: AbortSignal) {
+export async function fetch(url) {
  url = removePrefix(url);
  const res = await fetchURL(`/api/resources${url}`, { signal });
-  let data: Resource;
+  const res = await fetchURL(`/api/resources${url}`, {});
-  try {
+
-    data = (await res.json()) as Resource;
+  let data = await res.json();
  } catch (e) {
    // Check if the error is an intentional cancellation
    if (e instanceof Error && e.name === "AbortError") {
      throw new StatusError("000 No connection", 0, true);
    }
    throw e;
  }
  data.url = `/files${url}`;
  if (data.isDir) {
    if (!data.url.endsWith("/")) data.url += "/";
-    // Perhaps change the any
+    data.items = data.items.map((item, index) => {
    data.items = data.items.map((item: any, index: any) => {
      item.index = index;
      item.url = `${data.url}${encodeURIComponent(item.name)}`;
@ -38,12 +28,10 @@ export async function fetch(url: string, signal?: AbortSignal) {
  return data;
 }
-async function resourceAction(url: string, method: ApiMethod, content?: any) {
+async function resourceAction(url, method, content) {
  url = removePrefix(url);
-  const opts: ApiOpts = {
+  let opts = { method };
    method,
  };
  if (content) {
    opts.body = content;
@ -54,15 +42,15 @@ async function resourceAction(url: string, method: ApiMethod, content?: any) {
  return res;
 }
-export async function remove(url: string) {
+export async function remove(url) {
  return resourceAction(url, "DELETE");
 }
-export async function put(url: string, content = "") {
+export async function put(url, content = "") {
  return resourceAction(url, "PUT", content);
 }
-export function download(format: any, ...files: string[]) {
+export function download(format, ...files) {
  let url = `${baseURL}/api/raw`;
  if (files.length === 1) {
@ -70,7 +58,7 @@ export function download(format: any, ...files: string[]) {
  } else {
    let arg = "";
-    for (const file of files) {
+    for (let file of files) {
      arg += removePrefix(file) + ",";
    }
@ -83,15 +71,14 @@ export function download(format: any, ...files: string[]) {
    url += `algo=${format}&`;
  }
  if (store.state.jwt) {
    url += `auth=${store.state.jwt}&`;
  }
  window.open(url);
 }
-export async function post(
+export async function post(url, content = "", overwrite = false, onupload) {
  url: string,
  content: ApiContent = "",
  overwrite = false,
  onupload: any = () => {}
 ) {
  // Use the pre-existing API if:
  const useResourcesApi =
    // a folder is being created
@ -106,15 +93,10 @@ export async function post(
    : postTus(url, content, overwrite, onupload);
 }
-async function postResources(
+async function postResources(url, content = "", overwrite = false, onupload) {
  url: string,
  content: ApiContent = "",
  overwrite = false,
  onupload: any
 ) {
  url = removePrefix(url);
-  let bufferContent: ArrayBuffer;
+  let bufferContent;
  if (
    content instanceof Blob &&
    !["http:", "https:"].includes(window.location.protocol)
@ -122,15 +104,14 @@ async function postResources(
    bufferContent = await new Response(content).arrayBuffer();
  }
  const authStore = useAuthStore();
  return new Promise((resolve, reject) => {
-    const request = new XMLHttpRequest();
+    let request = new XMLHttpRequest();
    request.open(
      "POST",
      `${baseURL}/api/resources${url}?override=${overwrite}`,
      true
    );
-    request.setRequestHeader("X-Auth", authStore.jwt);
+    request.setRequestHeader("X-Auth", store.state.jwt);
    if (typeof onupload === "function") {
      request.upload.onprogress = onupload;
@ -154,41 +135,35 @@ async function postResources(
  });
 }
-function moveCopy(
+function moveCopy(items, copy = false, overwrite = false, rename = false) {
-  items: any[],
+  let promises = [];
  copy = false,
  overwrite = false,
  rename = false
 ) {
  const layoutStore = useLayoutStore();
  const promises = [];
-  for (const item of items) {
+  for (let item of items) {
    const from = item.from;
-    const to = encodeURIComponent(removePrefix(item.to ?? ""));
+    const to = encodeURIComponent(removePrefix(item.to));
    const url = `${from}?action=${
      copy ? "copy" : "rename"
    }&destination=${to}&override=${overwrite}&rename=${rename}`;
    promises.push(resourceAction(url, "PATCH"));
  }
-  layoutStore.closeHovers();
+
  return Promise.all(promises);
 }
-export function move(items: any[], overwrite = false, rename = false) {
+export function move(items, overwrite = false, rename = false) {
  return moveCopy(items, false, overwrite, rename);
 }
-export function copy(items: any[], overwrite = false, rename = false) {
+export function copy(items, overwrite = false, rename = false) {
  return moveCopy(items, true, overwrite, rename);
 }
-export async function checksum(url: string, algo: ChecksumAlg) {
+export async function checksum(url, algo) {
  const data = await resourceAction(`${url}?checksum=${algo}`, "GET");
  return (await data.json()).checksums[algo];
 }
-export function getDownloadURL(file: ResourceItem, inline: any) {
+export function getDownloadURL(file, inline) {
  const params = {
    ...(inline && { inline: "true" }),
  };
@ -196,7 +171,7 @@ export function getDownloadURL(file: ResourceItem, inline: any) {
  return createURL("api/raw" + file.path, params);
 }
-export function getPreviewURL(file: ResourceItem, size: string) {
+export function getPreviewURL(file, size) {
  const params = {
    inline: "true",
    key: Date.parse(file.modified),
@ -205,26 +180,23 @@ export function getPreviewURL(file: ResourceItem, size: string) {
  return createURL("api/preview/" + size + file.path, params);
 }
-export function getSubtitlesURL(file: ResourceItem) {
+export function getSubtitlesURL(file) {
  const params = {
    inline: "true",
  };
-  return file.subtitles?.map((d) => createURL("api/subtitle" + d, params));
+  const subtitles = [];
  for (const sub of file.subtitles) {
    subtitles.push(createURL("api/raw" + sub, params));
  }
  return subtitles;
 }
-export async function usage(url: string, signal: AbortSignal) {
+export async function usage(url) {
  url = removePrefix(url);
-  const res = await fetchURL(`/api/usage${url}`, { signal });
+  const res = await fetchURL(`/api/usage${url}`, {});
-  try {
+  return await res.json();
    return await res.json();
  } catch (e) {
    // Check if the error is an intentional cancellation
    if (e instanceof Error && e.name == "AbortError") {
      throw new StatusError("000 No connection", 0, true);
    }
    throw e;
  }
 }
--- a/frontend/src/api/index.js
+++ b/frontend/src/api/index.js
--- a/frontend/src/api/pub.js
+++ b/frontend/src/api/pub.js
@ -1,7 +1,7 @@
 import { fetchURL, removePrefix, createURL } from "./utils";
 import { baseURL } from "@/utils/constants";
-export async function fetch(url: string, password: string = "") {
+export async function fetch(url, password = "") {
  url = removePrefix(url);
  const res = await fetchURL(
@ -12,12 +12,12 @@ export async function fetch(url: string, password: string = "") {
    false
  );
-  const data = (await res.json()) as Resource;
+  let data = await res.json();
  data.url = `/share${url}`;
  if (data.isDir) {
    if (!data.url.endsWith("/")) data.url += "/";
-    data.items = data.items.map((item: any, index: any) => {
+    data.items = data.items.map((item, index) => {
      item.index = index;
      item.url = `${data.url}${encodeURIComponent(item.name)}`;
@ -32,12 +32,7 @@ export async function fetch(url: string, password: string = "") {
  return data;
 }
-export function download(
+export function download(format, hash, token, ...files) {
  format: DownloadFormat,
  hash: string,
  token: string,
  ...files: string[]
 ) {
  let url = `${baseURL}/api/public/dl/${hash}`;
  if (files.length === 1) {
@ -45,7 +40,7 @@ export function download(
  } else {
    let arg = "";
-    for (const file of files) {
+    for (let file of files) {
      arg += encodeURIComponent(file) + ",";
    }
@ -65,11 +60,11 @@ export function download(
  window.open(url);
 }
-export function getDownloadURL(res: Resource, inline = false) {
+export function getDownloadURL(share, inline = false) {
  const params = {
    ...(inline && { inline: "true" }),
-    ...(res.token && { token: res.token }),
+    ...(share.token && { token: share.token }),
  };
-  return createURL("api/public/dl/" + res.hash + res.path, params);
+  return createURL("api/public/dl/" + share.hash + share.path, params, false);
 }
--- a/frontend/src/api/search.js
+++ b/frontend/src/api/search.js
@ -1,7 +1,7 @@
 import { fetchURL, removePrefix } from "./utils";
 import url from "../utils/url";
-export default async function search(base: string, query: string) {
+export default async function search(base, query) {
  base = removePrefix(base);
  query = encodeURIComponent(query);
@ -9,11 +9,11 @@ export default async function search(base: string, query: string) {
    base += "/";
  }
-  const res = await fetchURL(`/api/search${base}?query=${query}`, {});
+  let res = await fetchURL(`/api/search${base}?query=${query}`, {});
  let data = await res.json();
-  data = data.map((item: UploadItem) => {
+  data = data.map((item) => {
    item.url = `/files${base}` + url.encodePath(item.path);
    if (item.dir) {
--- a/Show More
+++ b/Show More
		`@ -0,0 +1,3 @@`
							`#!/usr/bin/with-contenv bash`

							`exec s6-setuidgid abc filebrowser -c /config/settings.json -d /database/filebrowser.db;`
		`@ -1,3 +0,0 @@`
			`#!/usr/bin/with-contenv bash`

			`exec s6-setuidgid abc filebrowser -c /config/settings.json;`