• ugo@feddit.it
    link
    fedilink
    English
    arrow-up
    11
    arrow-down
    4
    ·
    21 hours ago

    No need to expose jellyfin to the internet if you selectively allow peers on your lan via wireguard.

    • douglasg14b@lemmy.world
      link
      fedilink
      English
      arrow-up
      6
      arrow-down
      1
      ·
      14 hours ago

      Which doesn’t work for The grand majority of devices that would be used to watch said media.

      Tvs game consoles rokus so on so forth typically don’t support VPN clients.

      The Jonathan clients for these devices also typically don’t support alternative authentication methods which would allow you to put jellyfin behind a proxy and have the proxy exposed to the internet. Gating all access to jellyfin apis behind a primary authentication layer thus mitigating effectively all security vulnerabilities that are currently open.

      • WhyJiffie@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        1
        ·
        6 hours ago

        Tvs game consoles rokus so on so forth typically don’t support VPN clients.

        and that’s why you set up a VPN client box on the location, set it up as a regular VPN client, and install a reverse proxy on it that the dumb clients can connect to.

        the VPN box could be as simple as an old android phone no one uses, and termux

    • keyez@lemmy.world
      link
      fedilink
      English
      arrow-up
      14
      ·
      18 hours ago

      Easy for me but not my aunts, cousins or father in law to setup and use.

      • douglasg14b@lemmy.world
        link
        fedilink
        English
        arrow-up
        5
        ·
        14 hours ago

        Nor will the VPN work on things like their TV or Roku or game console. You know the things that people typically sit down and watch media on…

        • Dultas@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          arrow-down
          1
          ·
          10 hours ago

          Wireguard and possibly openvpn work on Android TVs. I set it up for my mom. Not sure about other OSs.

      • ugo@feddit.it
        link
        fedilink
        English
        arrow-up
        1
        ·
        18 hours ago

        I believe your situation, that said I set up wireguard on my SO’s mac and all that is needed is to flip a switch in an app to connect. For my aunt, I’d likely set that up permanently since it only affects traffic when accessing the lan.

      • WhyJiffie@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        1
        ·
        5 hours ago

        you are better just closing up shop then, because it’s not like the other services you are hosting are much better. vulnerabilities being discovered don’t mean they don’t exist, it just means the software is not popular enough or too complex for someone to look into it

          • WhyJiffie@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            1
            ·
            1 hour ago

            much of the internet is run on simpler software or by full time employees tasked to deal with all this. but sure, ignorance is bliss, what you don’t see does not exist, etc etc, keep running your Jellyfin exposed to the internet. you wouldnt even get to know when your system is compromised. but you know what? you could even remove your password for extra convenience. who would want to log in to a random jellyfin account anyway! surely no one! just don’t recommend these practices to anyone, because you are putting them at risk.

      • ugo@feddit.it
        link
        fedilink
        English
        arrow-up
        8
        arrow-down
        1
        ·
        20 hours ago

        Fair, you do you, I get a lot of value out of it instead.

        • Damarus@feddit.org
          link
          fedilink
          English
          arrow-up
          11
          arrow-down
          2
          ·
          20 hours ago

          The difference is that my friends get a lot of value out of my server, as they don’t need to use any technology they’re unfamiliar with.