NextExplorer

概述

NextExplorer is a modern, self-hosted web-based file explorer with secure access control and a polished UI. Features include fast previews for images, videos, and PDFs, a built-in code/text editor with syntax highlighting, link-based file sharing (read-only or read-write), ripgrep-powered search across filenames and content, and multiple view modes (grid, list, column). Security is built in with local users and groups, optional OIDC/SSO integration, account lockout policies, and session management. Toggle "Show more settings" for advanced options including OIDC single sign-on, reverse proxy trust, and account lockout configuration.

运行时参数

网络用户界面: http://[IP]:[PORT:3000]
网络: bridge
外壳: bash
特权: false

模板配置

Web UI PortPorttcp

Port for the NextExplorer web interface.

目标: 3000
默认值: 3000
价值: 3000

Config PathPathrw

Persistent storage for database, settings, and session data. Do not delete.

目标: /config
默认值: /mnt/user/appdata/nextexplorer/config
价值: /mnt/user/appdata/nextexplorer/config

Cache PathPathrw

Thumbnail cache and search indexes. Safe to clear if troubleshooting.

目标: /cache
默认值: /mnt/user/appdata/nextexplorer/cache
价值: /mnt/user/appdata/nextexplorer/cache

Data PathPathrw

Root directory to browse. Mounted paths appear as top-level volumes in the UI. Add more by clicking 'Add another Path'.

目标: /mnt/Data
默认值: /mnt/user
价值: /mnt/user

PUBLIC_URLVariable

External URL used for cookies, CORS, and callback URLs. Set this to your reverse proxy URL if using one (no trailing slash).

默认值: http://[IP]:3000
价值: http://[IP]:3000

Admin EmailVariable

Email for the admin account created on first launch. Only used during initial setup.

目标: AUTH_ADMIN_EMAIL

Admin PasswordVariable

Password for the admin account created on first launch. Only used during initial setup.

目标: AUTH_ADMIN_PASSWORD

Session SecretVariable

Random string (32+ chars) used to sign session cookies. Set a stable value to keep sessions valid across container restarts. Leave blank to auto-generate (sessions reset on restart).

目标: SESSION_SECRET

NODE_ENVVariable

Runtime environment. Leave as production.

默认值: production
价值: production

Container PortVariable

Internal container port. Should match the Web UI Port mapping.

目标: PORT
默认值: 3000
价值: 3000

Enable OIDCVariable

Set to 'true' to enable OpenID Connect single sign-on. Requires OIDC provider configuration below.

目标: OIDC_ENABLED
默认值: false
价值: false

OIDC Client IDVariable

Client ID from your OIDC identity provider (e.g. Authentik, Authelia, Keycloak).

目标: OIDC_CLIENT_ID

OIDC Client SecretVariable

Client secret from your OIDC identity provider.

目标: OIDC_CLIENT_SECRET

OIDC Issuer URLVariable

OIDC issuer/discovery URL from your identity provider (e.g. https://auth.example.com).

目标: OIDC_ISSUER

Trust ProxyVariable

Express trust proxy setting for running behind a reverse proxy. Usually auto-derived from PUBLIC_URL. Set to 'true', a number of hops, or a CIDR range if needed.