Selfhosted

59955 readers

378 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
No spam.
Posts here are to be centered around self-hosting. Please ensure it is clear in your post how it relates to self-hosting.
Don't duplicate the full text of your blog or git here. Just post the link for folks to click.
Submission headline should match the article title.
No trolling.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago

MODERATORS

curbstickle@anarchist.nexus

curbstickle_lw@lemmy.world

214

How to secure Jellyfin hosted over the internet? (programming.dev)

submitted 1 year ago by lambda@programming.dev to c/selfhosted@lemmy.world

137 comments fedilink hide all child comments

I already host multiple services via caddy as my reverse proxy. Jellyfin, I am worried about authentication. How do you secure it?

you are viewing a single comment's thread
view the rest of the comments

[–] jagged_circle@feddit.nl -2 points 1 year ago (1 children)

Kinda hard because they have an ongoing bug where if you put it behind a reverse proxy with basic auth (typical easy button to secure X web software on Internet), it breaks jellyfin.

Best thing is to not. Put it on your local net and connect in with a vpn

[–] satans_methpipe@lemmy.world -1 points 1 year ago (1 children)

I'm not experiencing that bug. My reverse proxy is only accessed locally at the moment though. I did have to play with headers a bit in nginx to get it working.

[–] jagged_circle@feddit.nl 1 points 1 year ago (1 children)

Basic auth. The bug is if you enable basic auth.

[–] satans_methpipe@lemmy.world -1 points 1 year ago (1 children)

It is enabled, but now I'm doubting that. I'll double check when my homelab shift is complete.

[–] jagged_circle@feddit.nl 1 points 1 year ago* (last edited 1 year ago)

It isnt. Else you wouldn't be able to load many jellyfin assets. Because there's a colission of the Auth header