▲ 204 ▼ How would you expose Jellyfin securely without a vpn? (discuss.online) submitted 3 months ago by kiol@discuss.online to c/selfhosted@lemmy.world 199 comments fedilink hide all child comments Assuming the user will not be connecting over vpn, but is both remote and non-technical, how would you expose Jellyfin to them securely?
[+] syaochan@feddit.it 4 points 3 months ago* (last edited 5 days ago) (3 children) [removed by mod] permalink fedilink source parent hideshow 6 child comments replies: [–] kcweller@feddit.nl 4 points 3 months ago (1 child) By setting up a reverse proxy you redirect the traffic through that specific proxy which means less open ports (basically just 80/443), less monitoring, the ability to easily put a WAF inbetween, etc. permalink fedilink source parent hideshow 2 child comments replies: [–] nibbler@discuss.tchncs.de 1 point 3 months ago Ports are closed by firewalls, and if you need to port forward on your home router this is a non-issue anyway permalink fedilink source parent [–] Flatfire@lemmy.ca 3 points 3 months ago* You've got a couple benefits. If you have a domain name, and aren't advertising it publicly, then you can use the reverse proxy to point that domain to a non-standard port that Jellyfin runs on. Security through obscurity is not good security, but it does prevent the majority of port scanning attacks. You can also use fail2ban on the reverse proxy side to try and mitigate some attacks. permalink fedilink source parent [–] PeriodicallyPedantic@lemmy.ca 1 point 3 months ago Some reverse proxies have an authentication layer. But this typically breaks the jellyfin Mobile app. permalink fedilink source parent
[–] kcweller@feddit.nl 4 points 3 months ago (1 child) By setting up a reverse proxy you redirect the traffic through that specific proxy which means less open ports (basically just 80/443), less monitoring, the ability to easily put a WAF inbetween, etc. permalink fedilink source parent hideshow 2 child comments replies: [–] nibbler@discuss.tchncs.de 1 point 3 months ago Ports are closed by firewalls, and if you need to port forward on your home router this is a non-issue anyway permalink fedilink source parent
[–] nibbler@discuss.tchncs.de 1 point 3 months ago Ports are closed by firewalls, and if you need to port forward on your home router this is a non-issue anyway permalink fedilink source parent
[–] Flatfire@lemmy.ca 3 points 3 months ago* You've got a couple benefits. If you have a domain name, and aren't advertising it publicly, then you can use the reverse proxy to point that domain to a non-standard port that Jellyfin runs on. Security through obscurity is not good security, but it does prevent the majority of port scanning attacks. You can also use fail2ban on the reverse proxy side to try and mitigate some attacks. permalink fedilink source parent
[–] PeriodicallyPedantic@lemmy.ca 1 point 3 months ago Some reverse proxies have an authentication layer. But this typically breaks the jellyfin Mobile app. permalink fedilink source parent