What’s your go too (secure) method for casting over the internet with a Jellyfin server.

I’m wondering what to use and I’m pretty beginner at this

  • Mordikan@kbin.earth
    4·
    19 天前

    For my travel devices, I use Tailscale to talk to the server. For raw internet, I use their funnel feature to expose the service over HTTPS. Then just have fail2ban watching the port to make sure no shenanigans or have the entire service offlined until I can check it.

  • borax7385@lemmy.worldEnglish
    6·
    19 天前

    I have had Jellyfin directly open to the Internet with a reverse proxy for years. No problems.

    • pHr34kY@lemmy.worldEnglish
      3·
      19 天前

      If your reverse proxy only acknowledges jellyfin exists if the hostname is correct, you won’t get discovered by an IP scanner.

      Mine’s on jellyfin.[domain].com and you get a completely different page if you hit it by IP address.

      If it does get found, there’s also a fail2ban to rate-limit someone brute-forcing a login.

      I’ve always exposed my home IP to the internet. Haven’t had an issue in the last 15 years. I’m running about 10 public-facing services including NTP and SMTP.

  • Johannes Jacobs@lemmy.jhjacobs.nlEnglish
    2·
    19 天前

    With wireguard i set up an easy VPN, then vpn to the home network and use jellyfin.

    If i cant use vpn, i have Jellyfin behind a caddy server with automatic https and some security settings.

    • EpicFailGuy@lemmy.worldEnglish
      1·
      19 天前

      I’m currently using CF Tunnels and I’m thinking about this (I have pretty good offers for VPS as low as $4 a month)

      Can you comment on bandwidth expectations? My concern is that I also tunnel Nextcloud and my offsite backups and I may exceed the VPS bandwidth restrictions.

      BTW I’m testing Pangolin which looks AWESOME so far.

      • skoell13@feddit.orgEnglish
        3·
        18 天前

        I am using the free Oracle VPS offer until they block me, so far I have no issue. Alzernatively I wanted to check out IONOS, since you dont have a bandwidth limit there.

        • EpicFailGuy@lemmy.worldEnglish
          2·
          18 天前

          WOW! That’s one hell of a deal. You’ve convinced me XD I’m installing pangolin Right now. The hell with Cloudflare and their evil ways

  • status6@lemmy.worldEnglish
    1·
    17 天前

    I use mTLS by adding a reverse proxy between Jellyfin and the Inet. This makes it hard to use the app, but works perfect with a browser. If you still want to use the app. There is a solution by using stunnel (termux) between te app and the Inet or better, a wireguard VPN.

  • confusedbytheBasics@lemmy.worldEnglish
    2·
    15 天前

    I keep jellyfin up to date in a container and forward tcp/8920 on my router to the container. Easy and plenty secure. People in this thread are wildly overthinking it.

  • HeyJoe@lemmy.worldEnglish
    3·
    19 天前

    Synology with Emby (do not use the connect service they offer) running behind my fortinet firewall. DDNS with my own domain name and ssl cert. Open 1 custom port (not 443) for it, and that’s it. Geoblock every country but my own, which basically eliminated all random traffic that was hitting hit. I’ve been running it this way for 5 years now and have no issues to report.

  • Sgt_choke_n_stroke@lemmy.worldEnglish
    4·
    19 天前

    Synology worked for me. They have built in reverse proxy. As well as good documentation to install it on their machine. Just gotta configure your wifi router to port forward your device and bam you’re ready to rock and roll

  • PieMePlenty@lemmy.worldEnglish
    14·
    19 天前

    I access it through a reverse proxy (nginx). I guess the only weak point is if someone finds out the domain for it and starts spamming the login screen. But I’ve restricted access to the domain for most of the world anyway. Wireguard would probably be more secure but its not always possible if like on vacation and want to use it on the TV there…