Selfhosted

61054 readers

543 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

Be civil.
No spam.
Posts are to be related to self-hosting.
Don't duplicate the full text of your blog or readme if you're providing a link.
Submission headline should match the article title.
No trolling.
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.
AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago

MODERATORS

curbstickle@anarchist.nexus

curbstickle_lw@lemmy.world

Round Two: Can I manage to set up Jellyfin correctly this time? (lemmy.blahaj.zone)

submitted 11 months ago* (last edited 11 months ago) by compostgoblin@lemmy.blahaj.zone to c/selfhosted@lemmy.world

42 comments fedilink hide all child comments

Hi y’all, thanks for the help with my question yesterday. I did a bit of homework, and I think I’ve got things figured out. Here’s my revised plan:

configure a cron job to update DuckDNS with my IP address every 5 minutes
use ufw to block all incoming traffic, except to ports 80 and 443, to allow incoming traffic to reach Caddy
configure the Caddyfile to direct traffic from my DuckDNS subdomain to Jellyfin’s port

Does this seem right this time? Am I missing anything, or unnecessarily adding steps? Thanks in advance, I’ll get the hang of all this someday!

you are viewing a single comment's thread
view the rest of the comments

[–] AbsolutelyNotAVelociraptor@sh.itjust.works 11 points 11 months ago (1 children)

If it's for your personal use and no one else is going to connect, why don't you just configure a wireguard tunnel to remotely connect to your server as if you were in LAN without exposing anything?

[–] compostgoblin@lemmy.blahaj.zone 6 points 11 months ago (2 children)

I’d like to be able to share it with friends and family

[–] Onomatopoeia@lemmy.cafe 5 points 11 months ago* (last edited 11 months ago) (2 children)

Tailscale has the Funnel feature too, which puts the endpoint on Tailscale's servers.

You could do both - Funnel for people who you don't want to walk through setting up a client, and use the client for those who you're willing to put the effort into.

[–] compostgoblin@lemmy.blahaj.zone 5 points 11 months ago* (last edited 11 months ago)

My preference would be to avoid Tailscale, but I’ll check it out. Thanks!

[–] bigboitricky@lemmy.world 2 points 11 months ago

I second this for the funnel feature

It made my whole issue with ports easy since it forwards only one open port

[–] AbsolutelyNotAVelociraptor@sh.itjust.works 3 points 11 months ago

Tailscale allows you to do the same except you can create keys with limited access to only certain ports (just in case you don't want them peeking around your server).