Files
hassio-addons/calibre_web/config.yaml
Alexandre c697ed2c06 fix(calibre-web): trust the addon ip so ingress login works on 0.6.27 (#3004)
* fix(calibre-web): trust the addon ip so ingress login works on 0.6.27

Calibre-web 0.6.27 added a trusted-source check for the reverse proxy auth
header (cps/reverse_proxy_auth.py:is_trusted_proxy_source) and defaults
config_reverse_proxy_trusted_ips to "127.0.0.1,::1". The ingress nginx binds
its upstream socket to the addon ip (proxy_bind $server_addr,
rootfs/etc/nginx/servers/ingress.conf:13), so calibre-web sees
::ffff:<addon ip> and discards X-WebAuth-User, leaving ingress at the login
page.

80-configuration.sh now writes that address - plain and ipv4-mapped, plus the
loopback forms - into config_reverse_proxy_trusted_ips next to the two
settings it already applies. The update is tolerated failing because the
column only exists after calibre-web 0.6.27+ has migrated app.db.

Closes #3003

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

* fix: address CodeRabbit review

---------

Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
2026-08-23 14:02:45 +02:00

121 lines
2.1 KiB
YAML

arch:
- aarch64
- amd64
description: Browsing, reading and downloading eBooks using an existing Calibre database
devices:
- /dev/dri
- /dev/dri/card0
- /dev/dri/card1
- /dev/dri/renderD128
- /dev/vchiq
- /dev/video10
- /dev/video11
- /dev/video12
- /dev/video13
- /dev/video14
- /dev/video15
- /dev/video16
- /dev/ttyUSB0
- /dev/sda
- /dev/sdb
- /dev/sdc
- /dev/sdd
- /dev/sde
- /dev/sdf
- /dev/sdg
- /dev/nvme
- /dev/nvme0
- /dev/nvme0n1
- /dev/nvme0n1p1
- /dev/nvme0n1p2
- /dev/nvme0n1p3
- /dev/nvme1n1
- /dev/nvme1n1p1
- /dev/nvme1n1p2
- /dev/nvme1n1p3
- /dev/nvme2n1
- /dev/nvme2n1p1
- /dev/nvme2n1p2
- /dev/nvme2n3p3
- /dev/mmcblk
- /dev/fuse
- /dev/sda1
- /dev/sdb1
- /dev/sdc1
- /dev/sdd1
- /dev/sde1
- /dev/sdf1
- /dev/sdg1
- /dev/sda2
- /dev/sdb2
- /dev/sdc2
- /dev/sdd2
- /dev/sde2
- /dev/sdf2
- /dev/sdg2
- /dev/sda3
- /dev/sdb3
- /dev/sda4
- /dev/sdb4
- /dev/sda5
- /dev/sda6
- /dev/sda7
- /dev/sda8
- /dev/nvme0
- /dev/nvme1
- /dev/nvme2
environment:
DOCKER_MODS: linuxserver/mods:universal-calibre
FM_HOME: /config
HOME: /config
PGID: "0"
PUID: "0"
calibre-web_CONFIG_DIRECTORY: /config
shm_size: 1gb
hassio_api: true
image: ghcr.io/alexbelgium/calibre_web-{arch}
ingress: true
init: false
map:
- addon_config:rw
- all_addon_configs:rw
- homeassistant_config:rw
- media:rw
- share:rw
- ssl
name: Calibre-web
options:
env_vars: []
PGID: 0
PUID: 0
panel_admin: false
panel_icon: mdi:library
ports:
8083/tcp: 8084
ports_description:
8083/tcp: Calibre-web webui (Not required for Ingress)
privileged:
- SYS_ADMIN
- DAC_READ_SEARCH
- NET_ADMIN
schema:
env_vars:
- name: match(^[A-Za-z0-9_]+$)
value: str?
DOCKER_MODS: str?
OAUTHLIB_RELAX_TOKEN_SCOPE: str?
PGID: int
PUID: int
TZ: str?
cifsdomain: str?
cifspassword: str?
cifsusername: str?
ingress_user: str?
localdisks: str?
networkdisks: str?
slug: calibre-web
udev: true
url: https://github.com/alexbelgium/hassio-addons/tree/master/calibre_web
version: "0.6.27.1"
video: true