feat: integrate DSH Filebrowser (pinned v2.32.0, dark mode, toggle selector UI from Claude Design, /u/nabil/files/ proxy)

docker-compose.yml

@@ -7,7 +7,7 @@ services:
     restart: unless-stopped
     user: "1026:100"
     ports:
-      # Bind strictement sur loopback pour n'etre accessible QUE par Cloudflare Tunnel / Tailscale
+      # Bind strictement sur loopback pour n'etre accessible QUE par Cloudflare Tunnel
       - "127.0.0.1:8080:8080"
     volumes:
       - ./data:/app/data
@@ -21,8 +21,39 @@ services:
       - HERMES_NYORA_URL=http://100.86.197.88:3020
       - HERMES_PERSO_URL=http://100.86.197.88:3031
       - HERMES_NABIL_URL=http://127.0.0.1:8642
+      - DSH_FILEBROWSER_URL=http://dsh-filebrowser:80
+    depends_on:
+      - dsh-filebrowser
     dns:
       - 1.1.1.1
       - 8.8.8.8
+    networks:
+      - hub-net
     labels:
       com.centurylinklabs.watchtower.enable: "false"
+
+  dsh-filebrowser:
+    image: filebrowser/filebrowser:v2.32.0
+    container_name: dsh-filebrowser
+    restart: unless-stopped
+    user: "${DSH_UID:-1001}:${DSH_GID:-1001}"
+    command:
+      - "--noauth"
+      - "--root=/srv"
+      - "--baseurl=/u/nabil/files"
+      - "--address=0.0.0.0"
+      - "--port=80"
+      - "--branding.theme=dark"
+    volumes:
+      - /home/dsh-agent/dsh-vps/workspace:/srv
+    ports:
+      # Bind strictement loopback
+      - "127.0.0.1:8901:80"
+    networks:
+      - hub-net
+    labels:
+      com.centurylinklabs.watchtower.enable: "false"
+
+networks:
+  hub-net:
+    driver: bridge