this post was submitted on 19 May 2026
392 points (97.1% liked)
Selfhosted
60024 readers
874 users here now
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
-
Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
-
No spam.
-
Posts here are to be centered around self-hosting. Please ensure it is clear in your post how it relates to self-hosting.
-
Don't duplicate the full text of your blog or git here. Just post the link for folks to click.
-
Submission headline should match the article title.
-
No trolling.
Resources:
- selfh.st Newsletter and index of selfhosted software and apps
- awesome-selfhosted software
- awesome-sysadmin resources
- Self-Hosted Podcast from Jupiter Broadcasting
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Unless your user comes and logs in on your network, and only streams when they’re at your house, then you’ve just opened your server to the world.
Plex has bandwidth controls.
Tailscale and IP whitelisting are both viable options
No they’re not. No one is connecting their tv to Tailscale, especially not your parents or grand parents, and ip whitelisting is still dangerous and insecure on networks you don’t control.
Tailscale has native clients for all the major TV OS'. And I'm not whitelisting public networks for my friends' convenience. If they're traveling, they use tailscale with their mobile device or not at all. If you're talking about IP spoofing that's not a realistic vulnerability concern for a home media server.
At least I know the potential attack vectors for my Jellyfin server and can mitigate potential security concerns.
No it doesn't lol. Only the extreme minority of people are using TVs that can even install apps.
Yet on plex there aren't any lol. If you're opening your server to the internet, and giving other people access, it's not secure - especially via software like JellyFin where the devs even know and say it's not secure.