RECAP towards bringing us back to a truly workable & sane solution — all videos/audio/media/books need to be playable without wastefully polluting server's memory.

Just for the moment, all "books" appear to be forcibly public under URL...

http://box/library/calibre-web/

...which is extremely concerning for 2 reasons:

1. This violates everything about Calibre-Web's username/password security model — and peoples' longstanding expectations :/

2. If the above is really needed in the very short-term during debugging / testing / designing a better solution, FYI this particular choice of URL (URLs containing string "/library/calibre-web/") is very strange — as it very unfortunately (makes it appear) as if the entire IIAB disk (from the root of the filesystem) is being made public :/

(While 2. is admittedly just a cosmetic issue, it's an extremely serious one if it makes everybody distrust the system!!)

I'm not sure we have an answer just yet to the larger questions (OOM/RAM/memory risks during playback of large audio/video/book files, ideally while honoring Calibre-Web's web username/password security model) BUT please all see the huge amount of ongoing progress within these 2 PR's in recent days: ✅

• PR [Workaround for] OOM / memory "502 Bad Gateway" crashes w/ large videos' playback or download-to-client [SEE ALSO #37 & #53] #51
• PR Restrict NGINX (public?) access to "large" files only (e.g. .mp3, .mp4, .webm) in /library/calibre-web — for PR #51 OOM workaround #57

Working with/alongside these TDD-oriented[*] IIAB refinements:

• PR Calibre-Web prereqs for audio/video + set app.db logging to /var/log/calibre-web.log w/ log level "DEBUG" iiab#3676
• PR calibre-web/tasks/install.yml: Better xklb & yt-dlp symlinks iiab#3677
• PR Introduce var 'calibreweb_venv_wipe: False' for TDD (test-driven development) of Calibre-Web iiab#3678
• PR enable-or-disable.yml: Don't create symlink /library/www/html/calibre-web -> /library/calibre-web (NGINX can go directly if/as nec!) iiab#3680

[*] Test-Driven Development.