You could probably set up a cloudflare tunnel. I forget what they call it. I think technically sending video through it is against their TOS but if just a few friends and family are using it I doubt you will hit their naughty list.
this post was submitted on 25 Apr 2025
83 points (97.7% liked)
Selfhosted
46410 readers
836 users here now
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
-
Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
-
No spam posting.
-
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.
-
Don't duplicate the full text of your blog or github here. Just post the link for folks to click.
-
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
-
No trolling.
Resources:
- selfh.st Newsletter and index of selfhosted software and apps
- awesome-selfhosted software
- awesome-sysadmin resources
- Self-Hosted Podcast from Jupiter Broadcasting
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
founded 2 years ago
MODERATORS
I've heard mixed responses about how sensitive they are about routing video through their service. I've heard some people are just fine running jellyfin/Plex while others get shut down from routing a security system through it.
I've used it about 2 years now. I have both Jellyfin and even had Invidious for a while. I don't even know it was against any terms until right now.
I share Jellyfin.
Behind a Reverse Proxy with 2FA that breaks client support.
So only web browser :)
I've been making people use VPN, but that's been a huge barrier to entry. I'm in the process of switching to IP allow list in traefik.
I just expose it to the internet.
I have it behind a proxy and IPS. I force my users to have strong passwords. I don't see why this would be a problem.
Its a major problem
It is only a matter of time before it gets compromised. Chances are you will have no idea it happened and you home internet will join the bot net of some nation state. The Jellyfin devs take security seriously but there will always be flaws.
There will always be flaws
You said it.
Reverse proxy with CrowdSec, which has setups specifically for Jellyfin. Docker for everything.
Now that's interesting, what is the purpose of the reverse proxy, don't you still need something exposed then?
A reverse proxy saves you from having to expose your services directly and acts as a go-between.
Internet <--> Reverse Proxy <--> Service
Right, but what exactly does the reverse proxy do to stop intrusion?
Think of it as more modular.
I personally used Traefik, but only because I'm a masochist and it would be useful to know in IT workplace.
Traefik + CrowdSec + CowdSec Traefik Bouncer.
Traefik handles the traffic, and said traffic has to get a green light from CrowdSec + Bouncer before it can go anywhere.
The concept of CrowdSec is honestly super awesome.
Is Taefik really that good? It seems crazy complex
It's designed to scale. Plus it's nifty to be able to add ~3 tags to a docker container and then it's instantly online and ready to be used.
Crowdsec is what stops the intrusion.
Crowdsec won't protect against a security vulnerability
It will if it detects the requests and blocks them
Only if it is from a known bad IP
Also the vulnerability may be in something needed for client functionality.
It protects against vulnerabilities in layer 3 of the OSI model. It is the thing that gets hit from the outside while the back end is hidden away. This makes some attacks much harder.
load more comments
(1 replies)
load more comments
(1 replies)
Making a note so I can find this again - also I have been loving JellyFin over Plex.
Jellyfin over Plex?
Yup, I like jelly more - not that I have one running over the other lol
I thought there was some way to use Jelly on the backend with a Plex client!
Hang on, why not open the port to jellyfin to the internet?
I have a lifetime Plex pass so its not urgent but I have a containers running emby and jellyfin to check them out. When I decide which one I planned to open it up and give people logins.
That wouldn't even be using TLS
Bad idea
load more comments
(3 replies)