Selfhosted

53034 readers

808 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
No spam posting.
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.
Don't duplicate the full text of your blog or github here. Just post the link for folks to click.
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
No trolling.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago

MODERATORS

HybridSarcasm@lemmy.world

HybridSarcasm@lemmy.hybridsarcasm.xyz

Own domain for Jellyfin and privacy concerns (lemmy.world)

submitted 3 days ago* (last edited 3 days ago) by dingleberrylover@lemmy.world to c/selfhosted@lemmy.world

42 comments fedilink hide all child comments

Hi everyone,

a couple of friends and I have a Jellyfin server running which is exposed to the internet via a reverse-proxy and https by using a free dynDNS provider.

The setup is working fine besides the dynDNS provider. We constantly face connection issues, making the dynamic DNS functionality very unreliable.

So I started looking into possible solutions and one particular would be to buy an own domain which would only cost a few bucks each month. With this I could keep the current setup and would just need to change the domain (and possibly the SSL certificate). I found a provider over which I could buy (rent?) a domain and which also provides dynDNS functionality. But I am not too sure if I understood this correctly:

if I have an own domain, why would I need the additional dynDNS functionality? I would guess that I would just continue updating your server's IP address to the domain name like we are doing now
can the provider over which I rent the domain with servers in my country actually see what our traffic is? Especially since we are streaming our movies etc.
is there a better way of obtaining and setting up your own domain also in terms of privacy and reliability than with a bigger company offering such services?

Thanks a lot for your feedback!

Edit: An important fact I forgot to add in my main post is that during these issues, the general server connection should be fine since it is located at a friends house and his internet connection is unaffected (e.g. we could still talk in Discord normally and he had no internet issues whatsoever)

you are viewing a single comment's thread
view the rest of the comments

[–] rtxn@lemmy.world 3 points 3 days ago* (last edited 3 days ago) (2 children)

It's possible that, when the ISP revokes the public address and assigns a new one, the DNS record isn't updated immediately and still points to the old address. Then every new request would be sent to the old, invalid address.

And this is where I start shilling for Tailscale. It's a Wireguard-based mesh VPN that is designed to work from behind firewalls, NAT, and CGNAT. It has its own internal split DNS provider, and probably some mechanism to handle public address changes that is transparent to the tunnelled traffic. You can use it to share the server with only the devices that have the client installed, or expose the server to the internet.

I've got it set up on my OPNSense firewall as a subnet router that advertises the subnet where my servers are, and often stream from Jellyfin over it. There's some overhead, but it's never been disruptive.

[–] Auli@lemmy.ca 4 points 2 days ago

Sure but of the 10 plus years I've been doing this never had an issue like that. But I have a 5 minute TTL.

[–] Coleslaw4145@lemmy.world 4 points 2 days ago

It's possible that, when the ISP revokes the public address and assigns a new one, the DNS record isn't updated immediately and still points to the old address. Then every new request would be sent to the old, invalid address.

I've got it set up on my OPNSense firewall

OPNsense has ddclient built in which solves this problem as well.