$ cat /etc/apparmor.d/usr.share.audiobookshelf.audiobookshelf
#include <tunables/global>

# vim:syntax=apparmor

/usr/share/audiobookshelf/audiobookshelf {
  #include <abstractions/base>
  #include <abstractions/nameservice>
  #include <abstractions/openssl>
  #include <abstractions/user-tmp>

  /srv/audiobooks/** r,
  /usr/lib/audiobookshelf-ffmpeg/ffmpeg mrix,
  /usr/lib/audiobookshelf-ffmpeg/ffprobe mrix,
  /usr/share/audiobookshelf/audiobookshelf r,
  owner /tmp/** mrw,
  owner /usr/share/audiobookshelf/config/ r,
  owner /usr/share/audiobookshelf/config/absdatabase.sqlite rwk,
  owner /usr/share/audiobookshelf/config/absdatabase.sqlite-journal rw,
  owner /usr/share/audiobookshelf/metadata/** rw,
  owner /usr/share/audiobookshelf/metadata/logs/daily/*.txt rw,
  owner /usr/share/audiobookshelf/metadata/logs/scans/*.txt w,
}