This page covers the shortest path from starting the WebUI to running an upload. For the complete workspace, configuration, security, and troubleshooting guide, see the full WebUI guide.
Pass one or more directories to browse, followed by --webui:
python upload.py "/path/to/media" --webui 127.0.0.1:5000Then open http://127.0.0.1:5000.
127.0.0.1:5000 is the default address. Bind to another interface only when other devices need to connect and the network is trusted or protected by an authenticated reverse proxy.
The File Browser only exposes configured browse roots. They can be supplied as:
- positional paths before
--webui; or - a comma-separated
UA_BROWSE_ROOTSenvironment variable, which takes precedence.
UA_BROWSE_ROOTS is required for the normal Docker setup because its command starts the WebUI without positional paths. Use container-side paths, not host-side paths. See Docker WebUI setup.
The first visit opens account setup. Choose the username and a strong password for the single local WebUI account. Later visits open the sign-in page.
The account can optionally use Remember me, authenticator-app two-factor authentication (2FA), and one-time recovery codes.
Open Configuration and work through the relevant sections. At minimum, configure the metadata services, clients, image hosts, and trackers required by your workflow.
Edits are staged in Pending changes. Review them, then choose Save Config. Closing the page or using a discard action does not save those edits.
- Return to Upload and select a file or folder in File Browser.
- Add optional CLI flags through Arguments, the command field, or a saved argument preset.
- Select the trackers for this run.
- Choose Execute Upload.
- Follow the live output and answer any interactive prompt at the bottom of the output panel.
During a run, the workspace also exposes binary progress and current media information. When available, Screenshots and Description let you review generated assets before the upload continues. Kill stops the active run.
- Prefer a localhost binding when the WebUI is only used on the same machine.
- Restrict
UA_BROWSE_ROOTSto the directories the application genuinely needs. - Use a stable
SESSION_SECRETorSESSION_SECRET_FILE, especially in containers. - Put internet-facing access behind an authenticated HTTPS reverse proxy and appropriate firewall rules.
- Run Upload Assistant as an unprivileged user.
See Security and administration for 2FA, API tokens, IP controls, and access logging.