Skip to main content

05-booklore.md

kstack: book: Centerpoint Home Lab chapter: Documents & Organization page: Booklore tags: [booklore, books, library, mariadb, step-ca]

Overview

Booklore is a personal e-book library manager. It indexes books from the NFS Multimedia share (read-only) and a local bookdrop directory for new additions. The app is a Java/Spring Boot application (JDK 25 with Shenandoah GC) backed by MariaDB. It uses its own internal authentication — no Authentik ForwardAuth or OIDC. The Step-CA root certificate is bind-mounted into the system trust store to allow Booklore to make HTTPS calls to internal *.home.local services.

Access

Type URL Auth
External https://booklore.jeevesconsults.ca GeoBlock + CrowdSec (own auth)
Internal https://booklore.home.local Own auth (Step-CA TLS)

Containers

Container Image Role
booklore grimmory/grimmory:latest Web application
booklore-db lscr.io/linuxserver/mariadb:latest MariaDB database

booklore (application)

Key environment variables:

Variable Value / Notes
DATABASE_USERNAME booklore
DATABASE_PASSWORD REDACTED
DATABASE_URL jdbc:mariadb://booklore-db:3306/booklore
BOOKLORE_PORT 6060
DISK_TYPE NETWORK (books from NFS mount)
USER_ID / GROUP_ID 1000
TZ America/Toronto
APP_VERSION v3.2.0

Runtime: Java 25 (Temurin JDK 25.0.3) with Shenandoah GC.
JVM tuning: max 60% RAM, Shenandoah compact heuristics, 256MB metaspace cap.

Bind mounts:

Host Path Container Path Purpose
/mnt/Multimedia/Books /books Book library (read-only via NFS)
/home/jeeves/docker/booklore/data /app/data App state and metadata
/home/jeeves/docker/booklore/bookdrop /bookdrop Drop zone for new books
/home/jeeves/docker/step-ca/config/certs/root_ca.crt /usr/local/share/ca-certificates/step-ca.crt Step-CA root trust injection

booklore-db (MariaDB LSIO)

Image: lscr.io/linuxserver/mariadb:latest

Variable Value
MYSQL_DATABASE booklore
MYSQL_USER booklore
MYSQL_PASSWORD REDACTED
PUID / PGID 1000

Bind mounts:

Host Path Container Path
/home/jeeves/docker/booklore/mariadb /config

Traefik Labels

traefik.http.routers.booklore-external.rule: Host(`booklore.jeevesconsults.ca`)
traefik.http.routers.booklore-external.entrypoints: websecure
traefik.http.routers.booklore-external.tls.certresolver: letsencrypt
traefik.http.routers.booklore-external.middlewares: plex-geoblock@file,crowdsec-bouncer@file
traefik.http.routers.booklore-external.service: booklore-svc

traefik.http.routers.booklore-internal.rule: Host(`booklore.home.local`)
traefik.http.routers.booklore-internal.entrypoints: websecure
traefik.http.routers.booklore-internal.tls.certresolver: step-ca
traefik.http.routers.booklore-internal.service: booklore-svc

traefik.http.services.booklore-svc.loadbalancer.server.port: 6060

Notes / Gotchas

  • The Step-CA root certificate bind mount (root_ca.crt → /usr/local/share/ca-certificates/) makes the container's Java runtime trust internal TLS certificates. This is required if Booklore makes any HTTPS requests to *.home.local services.
  • /mnt/Multimedia/Books is the NFS share from UnRAID — it must be mounted before Booklore starts or the library scan will fail silently. Check df -h /mnt/Multimedia if the library appears empty.
  • Drop new e-books (EPUB, PDF) into /home/jeeves/docker/booklore/bookdrop for automatic library import.
  • grimmory/grimmory:latest is the container image name for the Booklore project.

Last Updated: 2026-06-17

No comments to display

Back to top