File Manager¶

The File Manager provides a web-based interface to manage files stored within the Docker volumes of the dashboard services. It allows for easy access to generated reports, invoices, and uploaded files without needing to SSH into the server.

Access¶

URL: https://file-manager.lage-beauty.de/
Username: admin
Password: (See Bitwarden)

Configuration¶

The service is built using the filebrowser/filebrowser:s6 image. It mounts several named volumes to provide access to data from other services and runs as root (user: "0:0") so create / move / rename / delete work on files owned by service-invoice or n8n.

file-manager:
  image: filebrowser/filebrowser:s6
  user: "0:0"
  ports:
    - "${FILEBROWSER_PORT:-8080}:80"
  env_file:
    - .env
  volumes:
    - eval:/srv/eval
    - invoices:/srv/invoices
    - reports:/srv/reports
    - multi_repricer_uploads:/srv/multi_repricer_uploads
    - filebrowser_data:/database
    - filebrowser_config:/config
  networks:
    - app-network

Mounted Volumes¶

Mount	Purpose
`/srv/eval`	Plenty inventur / eval XLSX
`/srv/invoices`	Gmail downloads, platform invoices, n8n uploads
`/srv/reports`	Buchhaltung CSVs (`otto_umsatz`, `plenty_umsatz`, `kontoauszuege`)
`/srv/multi_repricer_uploads`	Multi-Repricer uploads

Create folders inside these mounts (e.g. invoices/2026/08/). Top-level siblings next to invoices / reports live on the container filesystem and are not persisted.

Shared `invoices` / `reports` / `eval` volumes¶

Service	Mount path
`service-invoice`	`/app/invoices`, `/app/reports`, `/app/eval`
`file-manager`	`/srv/invoices`, `/srv/reports`, `/srv/eval`
`n8n` / `n8n-runner`	`/home/node/.n8n-files/invoices` (invoices only)

n8n is allowed to read/write invoices via N8N_BLOCK_STORAGE_FILESYSTEM_PATHS. Use subfolders per supplier or year, e.g. sellerlogic/2026/07/ or rechnungen-2026/.

On startup, service-invoice recursively sets these volumes to root:1000 with directory mode 2775 (setgid) and group-writable files so n8n (UID 1000) and File Manager can create, move, rename, and delete throughout the tree.

Write permissions / "Forbidden"¶

If the UI shows Forbidden on New folder / Delete / Rename / Move:

Confirm compose has user: "0:0" on file-manager, then recreate the container.
Restart service-invoice once so the entrypoint refreshes volume ACLs.
Enable Filebrowser user permissions (app-level, separate from Linux ACLs):

# from repo root
bash scripts/filebrowser-enable-write.sh

Or in the UI: Settings → User Management → admin → enable Create, Rename, Modify, Delete (and Admin if needed).

Remove any Settings → Rules that Deny paths under invoices, reports, or eval.