Selfhosted

61,901 readers

4,683 active

930 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

Be civil.
No spam.
Posts are to be related to self-hosting.
Don't duplicate the full text of your blog or readme if you're providing a link.
Submission headline should match the article title.
No trolling.
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.
AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago

moderators

curbstickle@anarchist.nexus

curbstickle_lw@lemmy.world

How would you expose Jellyfin securely without a vpn? (discuss.online)

submitted 3 months ago by kiol@discuss.online to c/selfhosted@lemmy.world

199 comments fedilink hide all child comments

Assuming the user will not be connecting over vpn, but is both remote and non-technical, how would you expose Jellyfin to them securely?

you are viewing a single comment's thread
view the rest of the comments

[–] axx@slrpnk.net 1 point 3 months ago (1 child)

What's your concern about running it behind a reverse proxy, like caddy or nginx?

permalink

fedilink

source

parent

hideshow 2 child comments

[–] zaggynl@feddit.nl 2 points 3 months ago* (last edited 3 months ago)

I don't consider Jellyfin a fully secure and audited application to host, unsecured endpoints come to mind, that and the less exposed to the whole internet the better.

https://github.com/jellyfin/jellyfin/issues/13987

Things like these scare me:

https://blog.lastpass.com/posts/notice-of-recent-security-incident

https://www.androidpolice.com/lastpass-breach-plex-update/

permalink

fedilink

source

parent

lemmy:	0.19.20
mlmym (mschae):	26.3.4