this post was submitted on 28 Nov 2023
3 points (100.0% liked)

Self-Hosted Main

504 readers
1 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

For Example

We welcome posts that include suggestions for good self-hosted alternatives to popular online services, how they are better, or how they give back control of your data. Also include hints and tips for less technical readers.

Useful Lists

founded 1 year ago
MODERATORS
 

Hi All,

I was hoping to get some advice on my new media stack. I am a bit of a Newbie when it comes to this, and I am a little bit confused at the final step of this. I recently bought a new Raspberry Pi 5, which I am using as the media stack. On this I have Radarr, Sonarr, Jellyfin, Jellyseer, Prowlarr and qBittorrent installed using docker. I have also made sure that both Prowlarr and qBittorent are behind a VPN (using NordVPN if it matters).

This works fine locally, but I would like this to be accessible externally. The need for this is that I have some friends who want to access the media Server. The 3 options I have seen for this are:

a) Open the ports on your router. I know this is very unsecure, even with jellyfin IP whitelisting, so I dont want to do this.

b) Use a VPN. This would require giving my friends my login to tailscale/NordVPN mesh, and would be a real pain when using smart TV's so would also prefer not to do this.

c) Use Nginx to create a weblink. This one I understand the least but I do have a domain using cloudflare. As far as I know though, this is against cloudflare TOS.

Am I missing any options here? and does anyone have any good guides on option 3 that wont break cloudflare TOS?

Thanks in advance.

top 6 comments
sorted by: hot top controversial new old
[–] [email protected] 1 points 11 months ago

You're missing the easiest option of them all: Cloudflare tunnels. You don't have to open any ports, your friends don't need to install extra software and it's free. I don't know about the TOS but I wouldn't worry to much because it's only a couple of friends.

[–] [email protected] 1 points 11 months ago

VPN or reverse proxy

[–] [email protected] 1 points 11 months ago (1 children)
[–] [email protected] 1 points 11 months ago

Isn’t that his second option? Do you have to give others access to your network and login to use the apps? Or how does it work?

[–] [email protected] 1 points 11 months ago

I suspect your friends probably don't need access to your whole media stack.

What parts they do need access to, and from what type of devices, will determine the best approach.

[–] [email protected] 1 points 11 months ago

Headscale/tailscale

Only one which can update policies on android.