Jellyfin activity is really nice to see. I have really liked it for the last several years, but activity means its a ongoing maintained project and that is awesome.
Also, thank you 1hitsong for all your contributions!
General question: what is the easiest way nowadays to enable idiot-proof remote access? Still a Tailscale network?
I’m so ready to be done with Plex but I keep worrying about some elderly family that use my server.
Tailscale or another Wireguard/VPN is the safest, but requires your users to have devices that support it.
Easiest is reverse proxy with domain and open ports, but your risk tolerance decides if that is viable or not I guess.
My users know that it’s Tailscale-able devices only or nothing, and that works fine.
I’d say spin it up and play with it. If it’s a lot of hassle, then stick with Plex for a little longer. It’s still a very good program, even if they are moving away from what they used to be.
I have it on reverse proxy to the world with libraries mounted read only
There’s no risk in doing this.
(I am invoking Cunningham’s Law)
Can you expand further on “no risk”? The software being exposed can still allow OS-level takeover just like all the other security vulnerabilities in the news the past week… You’re just relying on scale of internet and software coding strength it seems.
My parents have an Apple TV so I installed the Tailscale app (which they never have to touch) and Jellyfin (or Swiftfin, I can’t remember) and it’s fairly smooth for them.
I think it’s Netbird with their reverse proxy feature.
https://docs.netbird.io/manage/reverse-proxy
Netbird is like Tailscale, but Open Source. You don’t have to self-host, but you can. They have a reverse proxy feature that let’s you easily expose a device to the Internet. You can set basic authentication on the service, like requiring a password to access the page or only allowing certain IPs to access the page.
I use this with my parents. I got tired of the Tailscale app on the Google TV constantly shutting down. With the reverse proxy, there’s no more VPN app. My service is publicly accessible, but protected by an IP allow list.
I have this setup too and it’s pretty smooth. I have multiple services running on my home server, all of them have their own auth, and my home network is behind a shitty NAT. I put Netbird on a remote VPS and it was pretty easy to configure. I have used Tailscale and Nebula (now Defined Networking OSS) in the past, but Netbird was the one that covered all my use cases out of the box and worked flawlessly. If you have services without their own auth, you can put Authelia in front of them. I tried it with a few services and it worked well, but I ended up not using those services so I dropped them from my server.
This appears to be an unauthenticated remote code execution bug on par with PHP2shell according to the dotnet CVE
not sure if jellyfin is affectedby the vuln though
What “this” are you talking about?
the cve that they released this update to fix
deleted by creator
