Be careful with calibre-web; it's had a ton of vulnerabilities. To the author's credit, they are typically addressed quickly, but there have been enough related to auth to make me wary.
Maybe hosting this service behind a firewall / on a private network would make the most sense. I notice many people here are running Tailscale at home — perhaps this is why?