docs(calibre-server): correct the port map - pasta is port-forward mode

Only the 8084 forward is exposed; the desktop GUI runs inside the
container netns and is internal-only. Drop the now-unneeded
CUSTOM_HTTPS_PORT (no host-port conflict exists inside the netns).
This commit is contained in:
Frank
2026-09-21 12:51:06 -07:00
parent cb96525f78
commit 22204b49f5
2 changed files with 20 additions and 15 deletions
+7 -6
View File
@@ -55,17 +55,18 @@ The image is the current **desktop** build (Selkies web-streamed GUI), not the
headless image the old compose snippet assumed — the dedicated headless images
(ta264/docker-calibre, agentgreen/calibre-server) are dormant (calibre 6.10 /
2017, both below the 9.9.0 content-server fix). The unit therefore runs
`calibre-server` as the image's s6-overlay main service via `Exec=` and keeps
the desktop as a bonus:
`calibre-server` as the image's s6-overlay main service via `Exec=`.
| Surface | Host port | Auth |
|---------|-----------|------|
| Content server (OPDS + web UI) | **8084** (internal 8090) | HTTP Basic, single admin `calibre` in the SQLite userdb |
| Desktop GUI (bonus) | 8080 (HTTPS on 8182) | HTTP Basic, same credential |
| Desktop GUI (internal only) | none (8080/8181/8082 inside the container) | HTTP Basic ready (`CUSTOM_USER`/`CUSTOM_PASSWORD` in the env file) |
Port notes: 8080 inside the container is the image's own nginx (the desktop),
so the content server runs on internal 8090; `CUSTOM_HTTPS_PORT=8182` avoids
Tautulli's host 8181.
Port notes: `Network=pasta` on this host is port-FORWARD mode — the container
keeps its own netns and only `PublishPort`'d ports reach the host (verified
2026-09-21). The desktop GUI runs but is unreachable: exposing the browser
GUI is one `PublishPort` line away. 8080 *inside* the container is the
image's own nginx (the desktop), so the content server runs on internal 8090.
**Auth model (calibre 9.x):** users live in a SQLite userdb whose `pw` column
is **plaintext** — the file is mode 600. The single admin account is