Selfhosted

59850 readers

262 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
No spam.
Posts here are to be centered around self-hosting. Please ensure it is clear in your post how it relates to self-hosting.
Don't duplicate the full text of your blog or git here. Just post the link for folks to click.
Submission headline should match the article title.
No trolling.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago

MODERATORS

curbstickle@anarchist.nexus

curbstickle_lw@lemmy.world

Round Two: Can I manage to set up Jellyfin correctly this time? (lemmy.blahaj.zone)

submitted 10 months ago* (last edited 10 months ago) by compostgoblin@lemmy.blahaj.zone to c/selfhosted@lemmy.world

41 comments fedilink hide all child comments

Hi y’all, thanks for the help with my question yesterday. I did a bit of homework, and I think I’ve got things figured out. Here’s my revised plan:

configure a cron job to update DuckDNS with my IP address every 5 minutes
use ufw to block all incoming traffic, except to ports 80 and 443, to allow incoming traffic to reach Caddy
configure the Caddyfile to direct traffic from my DuckDNS subdomain to Jellyfin’s port

Does this seem right this time? Am I missing anything, or unnecessarily adding steps? Thanks in advance, I’ll get the hang of all this someday!

you are viewing a single comment's thread
view the rest of the comments

[–] AbidanYre@lemmy.world 13 points 10 months ago (1 children)

Wireguard or tailscale are much better ways of accessing jellyfin from outside your network.

[–] compostgoblin@lemmy.blahaj.zone 4 points 10 months ago (3 children)

What if I want a bunch of people to be able to log into my library via Finamp?

[–] frongt@lemmy.zip 3 points 10 months ago

Provide them with VPN access. If that's too much for them, then they don't get access. Tough. On the scale of security vs convenience, that's nothing.

If you really really want, you should at least see if you can put a WAF in front, and put the server itself somewhere it doesn't have access to the rest of your network (a DMZ) so that if and when it gets hacked, it doesn't compromise the entire network.

[–] ExperiencedWinter@lemmy.world 2 points 10 months ago

I highly recommend Tailscale, you can share machines/services with unlimited friends on the free tier, and all of the actual auth stuff is handled by someone who isn't me.

[–] FreedomAdvocate@lemmy.net.au -5 points 10 months ago* (last edited 10 months ago) (1 children)

You use plex instead, or you accept the massive security vulnerabilities.

[–] Auli@lemmy.ca 0 points 10 months ago (1 children)

What vulnerabilities? Sure there are some but nothing massive that I have seen. Care to post them.

[–] FreedomAdvocate@lemmy.net.au -2 points 10 months ago

web endpoints with zero authentication lol