479
submitted 4 days ago by TheIPW@lemmy.ml to c/selfhosted@lemmy.world
you are viewing a single comment's thread
view the rest of the comments
[-] fpslem@lemmy.world 119 points 4 days ago

This article doesn't mention the limitations of remote access for Jellyfin, which requires some tricks like reverse proxy or Tailscale. I think Jellyfin is a great option if you only watch/listen on your home network, but if anyone wants to replicate the remote access capabilities of Plex, I typically warn them they are going to have to roll their sleeves up.

[-] lostbit@feddit.nl 10 points 3 days ago

Don’t selfhost if you think a reverse proxy is tricky.

[-] Mic_Check_One_Two@reddthat.com 2 points 3 days ago* (last edited 3 days ago)

You shouldn’t even have Jellyfin on a reverse proxy, because it shouldn’t be externally available. There are several known security vulnerabilities (all marked as “closed” due to inactivity on git) that the devs have said will likely never be patched. Because patching them requires breaking away from the Emby fork that the entire project is built on.

It should only be externally available via a private VPN. And that alone excludes a lot of “I want to share my library with friends/family” scenarios, because step 0 will be getting their devices connected to your VPN.

At the very least, set up some form of access control/username+PW directly on your reverse proxy as a secondary security measure. Because if you can reach the JF landing page, you can exploit those vulnerabilities without needing a valid JF login. So you should configure your reverse proxy to act as a gatekeeper, and ensure attackers can’t even reach JF at all without having a valid login to your reverse proxy. But this will break most JF apps (except for browsers) because they likely won’t have any way to give an initial user+pass to the reverse proxy before they hit the JF server.

[-] lostbit@feddit.nl 3 points 2 days ago* (last edited 2 days ago)

Theres not a single high risk security issue in there as far i can see. Can you point them out?

[-] Flatfire@lemmy.ca 2 points 3 days ago

That seems like a rather arrogant tone to take. Reverse proxies are complicated. Easy to set up, but challenging to configure depending on what your needs are. Not everyone wants a homelab.

Everyone's journey starts somewhere and sometimes people's needs just don't extend beyond the easier choices available.

[-] TheIPW@lemmy.ml 45 points 4 days ago

You're right, I missed that.

I personally use a reverse proxy and Wireguard setup to access remotely.

[-] ripcord@lemmy.world 16 points 4 days ago

Not something that unfortunately works as easily for me to connect my ailing mom's TV to, and do NOT want to manage the reverse proxy + cert + etc setup for a number of reasons

[-] matron1049@lemmy.dbzer0.com 10 points 4 days ago

There are a ton of reverse proxy options that manage the cert for you

[-] ripcord@lemmy.world 8 points 4 days ago

There's lots of reasons I don't want to set this up

[-] W98BSoD@lemmy.dbzer0.com 11 points 4 days ago

But Jellyfin! It solves all your problems, you don’t have to pay for it (because fuck paying for software of any type even if it provides you some value), and did I mention Jellyfin‽

Why aren’t you using it yet? Are you a plex sympathizer? Get outta here with that!

What?

I don’t care if you have a good use case for using plex / Emby / Kodi / VLC / WMC / etc; you will assimilate and use Jellyifn!

JELLYFIN!!!!!11!1!1!1!1!. /s

[-] ripcord@lemmy.world 18 points 4 days ago

Jellyfin once located my lost puppy. Which Plex had stolen.

[-] W98BSoD@lemmy.dbzer0.com 4 points 4 days ago

I believe it! Emby probably kicked the dog whole plex stole it.

load more comments (2 replies)
[-] xistera@lemmy.dbzer0.com 5 points 3 days ago

This is like the 3rd thread I’ve seen you have a complete meltdown when someone mentions Jellyfin.

[-] W98BSoD@lemmy.dbzer0.com 2 points 3 days ago

Because it’s the app to use! Forget everything else!!!! JELLYFIN!!!1!1!1!1!

(That’s what you all sound like)

[-] rumba@lemmy.zip 3 points 3 days ago

I just wish they'd fucking take their security seriously and we could wipe plex out.

[-] W98BSoD@lemmy.dbzer0.com 1 points 2 days ago

Me too. But they also need a lot more features.

Like Tautulli and Plexamp.

[-] rumba@lemmy.zip 1 points 2 days ago

Jellystat isn't bad for a Taut alternative

[-] W98BSoD@lemmy.dbzer0.com 2 points 2 days ago

Isn’t bad or is a 1:1 replacement?

Because I already know the answer (like most Jellyfin answers).

[-] rumba@lemmy.zip 1 points 1 day ago

All I wanted to see is what activity over time was going on with my server and who was doing it. For that, it was clutch. YMMV

[-] PhAzE@lemmy.ca 3 points 3 days ago

The point is that you now have another app to manage or learn about just for remote viewing, and the general public can't and won't manage something like that. People like us, no problem, its easy, but my dad would never be able to, for example. He can install plex and just log in to an app anywhere to use it though.

Also, dont forget that many households have non-static IP addresses, so now you need more management for that issue (again, easy for us).

[-] matron1049@lemmy.dbzer0.com 3 points 3 days ago

In this scenario, your dad just installs Jellyfin and logs in.

You've set up the reverse proxy to your server, its transparent to him.

You can update DNS records automatically so its also a fire and forget kind of thing.

But I guess, give your data to the corpos because its easier.

[-] PhAzE@lemmy.ca 1 points 2 days ago

No, im talking about him running his own server. Not connecting to mine.

[-] rumba@lemmy.zip 1 points 3 days ago

You do then still have to expose JF to the open internet. That's not without risk. Neither is Plex but they do make it a point to secure all their endpoints before login.

load more comments (18 replies)
[-] szszl@szmer.info 7 points 3 days ago

There are literaly zero limitations by Jellyfin to remotely access your media. You are free to access your instance in any way you want. Fuck plex

load more comments (1 replies)
[-] skittle07crusher@sh.itjust.works 12 points 4 days ago

Tailscale truly could not be easier/simpler.

[-] hereiamagain@sh.itjust.works 8 points 3 days ago

Not for all clients, like Roku for example.

Yes the solution is different hardware, like a Google TV, older firestick, raspAP, or flash openwrt on a router. But that's no longer plug and play and may have other caveats. Besides costing money.

No shade, it's just not QUITE that simple every time.

load more comments (1 replies)
[-] jumponboard@lemmy.world 3 points 3 days ago* (last edited 3 days ago)

If you can spin up a podman container, you can use a caddyfile. Hell, if you can nano and read, you can set uo a caddyfile.

[-] rumba@lemmy.zip 2 points 3 days ago

Honestly for video I agree, for audio, it's just me and only in my house or phone so tailscale is fine. If my friends really want audio, they can pay streaming for it.

[-] matron1049@lemmy.dbzer0.com 8 points 4 days ago

A reverse proxy is a trick? That's like standard practice for web servers.

[-] Evotech@lemmy.world 10 points 4 days ago

Just fucking yeet it online

[-] surewhynotlem@lemmy.world 11 points 4 days ago

How does Plex get around that? I've only ever used jellyfin.

load more comments (19 replies)
this post was submitted on 08 Jun 2026
479 points (100.0% liked)

Selfhosted

59833 readers
528 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

  7. No low-effort posts. This is subjective and will largely be determined by the community member reports.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS