500
this post was submitted on 28 Nov 2025
500 points (98.3% liked)
Selfhosted
53199 readers
2287 users here now
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
-
Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
-
No spam posting.
-
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.
-
Don't duplicate the full text of your blog or github here. Just post the link for folks to click.
-
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
-
No trolling.
Resources:
- selfh.st Newsletter and index of selfhosted software and apps
- awesome-selfhosted software
- awesome-sysadmin resources
- Self-Hosted Podcast from Jupiter Broadcasting
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Why not? It depends on your situation, but if you have a static IP or a dyndns service, you can just open a port to your Jellyfin and reach it from anywhere.
You can also stick a reverse proxy in front of it, if you want to feel safer.
or use tail scale / headscale
Yes, but that's not always doable, e.g. on LG TV's.
You can “proxy” tailscale networks, you’d need 1 device per household with tailscale running and accepting/advertising routes. Not sure if tailscale IP addressing works in that case though, and just doing it via private IP can get problematic with same network range in the household
This sort of setup is a bit more advanced since it requires static routes on the remote router at least. Doable with one or two networks, but not if you have a bunch of users.
That works. I did it with a LG tv: Have a server advertising the routes with tailscale and in your tv when you configure the connection select that server as gateway and that's it.
That's smart. Thanks.
while not technically allowed by cloudflare TOS for the free plan, it's possible to host jellyfin under a cloudflare tunnel
Any old Raspberry Pi on your network can forward a port from LAN to the Jellyfin server on Tailscale somewhere. Single iptables masquerade command should do the trick. Or if you happen to have a good router with owrt support you can run Tailscale there too.
I'd strongly recommend reverse proxy, some sort of security like crowd sec or fail2ban and sperate auth (authelia, aithentik) in front of anything you're opening to the internet. Just opening services directly up to the internet is choice I'd politely describe as brave.
How do you manage a separate auth (I imagine HTTP auth) with app clients?