mildman1848/audiobookshelf
Self-hosted audiobook and podcast server - LinuxServer.io based container
3.1K
mildman1848/audiobookshelf repository overview
ā Audiobookshelf - LinuxServer.io Edition
Self-hosted audiobook and podcast server based on LinuxServer.io Alpine baseimage.
ā š¦ Available Registries
The audiobookshelf container is available on multiple registries:
# Docker Hub (recommended)
docker pull mildman1848/audiobookshelf:latest
docker pull mildman1848/audiobookshelf:2.30.0
# GitHub Container Registry
docker pull ghcr.io/mildman1848/audiobookshelf:latest
docker pull ghcr.io/mildman1848/audiobookshelf:2.30.0
# GitLab Container Registry
docker pull registry.gitlab.com/mildman1848/audiobookshelf:latest
docker pull registry.gitlab.com/mildman1848/audiobookshelf:2.30.0
# Codeberg Container Registry
docker pull codeberg.org/mildman1848/audiobookshelf:latest
docker pull codeberg.org/mildman1848/audiobookshelf:2.30.0
Multi-Architecture Support: All images support linux/amd64 and linux/arm64
ā Quick Start
# Complete setup (creates .env and generates secrets)
make setup
# Or manual setup:
mkdir -p data/audiobooks data/podcasts
cp .env.example .env
make secrets-generate
# Build and start
make build
make start
Access at: http://localhost:13378ā
ā š Secret Management
This container follows LinuxServer.io best practices for secret management using the FILE__ prefix pattern.
ā Generate Secrets
# Generate all required secrets
make secrets-generate
# View secret information
make secrets-info
# Rotate secrets (creates backup)
make secrets-rotate
# Clean old backups (keeps last 5)
make secrets-clean
ā Generated Secrets
- JWT Secret (512-bit): Authentication token signing
- Session Secret (256-bit): Session management
- API Key (256-bit): API authentication
ā How FILE__ Secrets Work
The LinuxServer.io init-secrets service reads environment variables with the FILE__ prefix:
# In docker-compose.yml
environment:
- FILE__TOKEN_SECRET=/run/secrets/audiobookshelf_jwt_secret
At container startup, the value from the file is read and made available as TOKEN_SECRET (without FILE__ prefix).
ā ļø Security:
- Never commit
secrets/directory to version control - Secrets are generated with cryptographically secure random data
- Secret files have
600permissions (owner read/write only)
ā šŖ Windows Docker Desktop Compatibility
ā WORKING: Bind mounts are fully supported on Windows Docker Desktop!
The previous EPERM errors were caused by strict security options, not by bind mounts themselves. The solution:
- ā
Bind mount for
/config- Config directory is accessible on host - ā
Migrations pre-copied - Stored in
/defaults/migrationsand copied at startup - ā
Security options adjusted -
no-new-privilegesand capability restrictions disabled for Windows compatibility
For Linux Production: You may re-enable security hardening by uncommenting the options in docker-compose.override.yml:
security_opt:
- no-new-privileges:true
cap_drop:
- ALL
cap_add:
- CHOWN
- SETUID
- SETGID
ā Build & Test
make build # Build image
make test # Test container
make validate # Validate Dockerfile
make security-scan # Security scan
ā Make Targets
make help # Show all available targets
make setup # Complete initial setup
make env-setup # Create .env from .env.example
make env-validate # Validate environment configuration
make secrets-generate # Generate secure secrets
make secrets-info # Show secret information
make build # Build Docker image
make start # Start container
make stop # Stop container
make restart # Restart container
make status # Show container status and health
make logs # Show container logs
make shell # Get shell access to container
ā Original Project
Based on Audiobookshelfā by advplyr (GPL-3.0)
- Documentation: https://www.audiobookshelf.org/docsā
- Support: https://github.com/advplyr/audiobookshelf/issuesā
Container maintained by mildman1848
Tag summary
Content type
Image
Digest
sha256:5bbd02dbfā¦
Size
115.9 MB
Last updated
12 months ago
docker pull mildman1848/audiobookshelf