61
Hello pirates, I am looking to start sailing the seas again but it's been a while looking for hardware requirements? (discuss.tchncs.de)
submitted 2 years ago by to c/piracy@lemmy.dbzer0.com
50 comments fedilink hide all child comments
 

As the title states I am wondering what would be a good machine to build for my piracy. I am open to buying a used machine on eBay and expanding over time.

The last time I was sailing I had a Dell R610 Server Rack but I don’t have the space for this now. So something that can sit behind a tv stand in the corner next to the router.

  • I would be running Plex / Jellyfin
  • Some kind of torrent software
  • Something for NZBs if still viable
  • then the usual SONARR, RADARR, etc

I would like to be able to let friends connect from outside my house to stream media and allow them access so they can add films and the server goes off and finds them, extracts them, and adds them to the media server.

Thanks.

you are viewing a single comment's thread
view the rest of the comments
[–] 7 points 2 years ago (20 children)

The only problem is properly exposing jellyfin to the Internet. How do you do it?

I'm not planning on leaving Plex anytime soon. But I did plan on setting up jellyfin in parallel to play with it and learn about it. But this stopped me in my tracks.

I don't want my family to need to VPN into my network. Plex, for as frustrating as it is in many ways, just works. And it works on so much stuff.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 20 child comments
    •
  • [–] 16 points 2 years ago* (1 child)

    Tailscale is what I do. If you make an exit nice they can forever stay on your VPN... I think...

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 1 year ago

    This is what everyone always says, and yeah, for most people this is probably the most secure and easiest option. But for me it's too much hassle for my family, too restrictive, and not at all what I'm looking for.

    However in this thread I've learned that JF supports https, so if done carefully and properly, I can expose it to the Internet directly, which is what I plan to do. Eventually. Plex is still easier for now.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 13 points 2 years ago (1 child)

    Jellyfin offers HTTPS, you just need to specify a certificate. It's going to be a lot easier to just setup a web server like nginx and expose that to the internet, probably via port forwarding on your gateway/router. In that case, you can get a free certificate from letsencrypt.

    So, the basic steps are:

    1. Get a domain name
    2. Setup JF server, ensure it works locally
    3. Install a web server and set it up to proxy traffic to JF
    4. Expose the web server ports 80 and 443 to the internet
    5. Setup letsencrypt with automatic renewal

    This might sound like a lot of work, but at least you own your data and service. Plex can and will block accounts, rendering servers basically useless.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 1 year ago

    Thanks, you and others in this thread are the first people to ever tell me about this.

    Everyone is always saying tailscale, but that's too complicated and restrictive for my family.

    I'm not afraid of port forwarding and dynamic DNS, I've played with it before. My main concern is just doing it safely, not exposing something to the Internet that wasn't designed to be exposed. Security risk, and all that.

    Obviously a VPN is the safest way. But as long as JF is reasonably robust and designed to be exposed, I'm happy with that. I just literally didn't know it was designed that way.

    Thanks!

  • permalink
  • fedilink
  • source
  • parent
  • [–] 8 points 2 years ago* (5 children)

    I use a reverse proxy with Nginx edit: Jellyfin wiki

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 1 point 1 year ago (4 children)

    Thanks, you and others in this thread are the first people to ever tell me about this.

    Everyone is always saying tailscale, but that's too complicated and restrictive for my family.

    I'm not afraid of port forwarding and dynamic DNS, I've played with it before. My main concern is just doing it safely, not exposing something to the Internet that wasn't designed to be exposed. Security risk, and all that.

    Obviously a VPN is the safest way. But as long as JF is reasonably robust and designed to be exposed, I'm happy with that. I just literally didn't know it was designed that way.

    Thanks!

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 1 point 1 year ago* (3 children)

    Jellyfin is not designed to be exposed directly. It can be but I wouldn't recommend it. If you are insistent on doing it, I would absolutely recommend engine X reverse proxying with a rate limit to prevent any brute force attacks as well as hiding your family's account on the login screen so not just anyone can see them. Also remember you need an SSL certificate which you can either self-sign or get from a free CA like let's encrypt.

    Tail scale works quite well but can be limiting in speed. Your family does not need any technical knowledge. They just sign in on the app and you can add their account to your tail scale domain. Keep in mind you may need to pay if you add more than three, I believe, users.

    The third and best option for you in my opinion would be a VPN. It doesn't suffer from the same speed issues that tailscale does. Technical setup would be a bit more difficult than tail scale, but you can do it on your family's device once and it should just always work. Youll need port forwarding, but that's really easy. One thing though, your internet service provider might change your IP address periodically. So you might want a domain name and dynamic DNS, which I would suggest you get from a service called FreeDNS. Like in the name, everything is free, unless you choose to donate , of course. They have it very intuitively laid out where you can use CRON to run a script periodically that just sends a curl ping to their servers so that they know what your new IP address is if it changes. It's a pretty simple setup.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 1 point 1 year ago (2 children)

    For a reverse proxy, would cloudfare be sufficient?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 1 year ago (1 child)

    cloudflare would, but you dont even need it if you are comfortable with port forwarding. a reverse proxy just forwards traffic to and from a device through a device. nginx is a popular platform for reverse proxies because it's easy to set up and configure.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 3 points 2 years ago (8 children)

    Sorry, why would Jellyfin be different from Plex for exposing to the Internet? Dynamic DNS service / static IP and router port forwarding just like any other self hosted thing. It requires a user/pass to login as usual. VPN is nice but not required.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 8 child comments
    •
  • [+] 10 points 2 years ago* (last edited 1 year ago) (6 children)
    [deleted]
  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 5 points 2 years ago (5 children)

    So it's not fully self hosted then? I can't see how it would do that without registering you with their own service as a middle man. Seems like that kinda defeats the purpose.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 6 points 2 years ago (1 child)

    Plex Inc has a central auth server, and your media server automatically creates a dynamic hostname for connecting to your server's IP. And if the user can't reach the server directly for some reason (NAT for example), Plex has a "relay server" that works as a proxy, but your quality gets reduced to like 320p or something.

    So if Plex Inc shut down their auth servers suddenly (or have downtime, which happened a couple years ago), you won't be able to do much. It's possible to bypass the central auth, but no one does it, because such auto-discovery is one of Plex's benefits -- user logs in on their app, and it shows all their possible servers. But otherwise, it's self-hosted.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 1 year ago

    Thanks, you and others in this thread are the first people to ever tell me about this.

    Everyone is always saying tailscale, but that's too complicated and restrictive for my family.

    I'm not afraid of port forwarding and dynamic DNS, I've played with it before. My main concern is just doing it safely, not exposing something to the Internet that wasn't designed to be exposed. Security risk, and all that.

    Obviously a VPN is the safest way. But as long as JF is reasonably robust and designed to be exposed, I'm happy with that. I just literally didn't know it was designed that way.

    Thanks!

  • permalink
  • fedilink
  • source
  • parent