Selfhosted

Ohh, I've had PLENTY of CC problems on Roku.

I use CC quite a bit, Every time a video has subtitles on it, and default is set to english, it fucking turns them on even iff they're set to off. Until a couple of months ago, you had to turn them on then off to get them to stop. I reported it, found the flag that wasn't being honored, I gave exact steps. They refused to fix it but did make it where i just had to turn them off. Now every movie/tv show i have that has english->default flags turns them on. about 1 in 10

No options to delay subtitles if they're messed up, no options to pull from opensubs.

I main Jellyfin, but have to keep Plex around because I have a decent number of remote users and don't feel like dealing with trying to walk through putting them on Tailscale and I can't trust any company that won't even put 2fa in their clients to be open to the world.

That's great if you have a Roku or Shield. I don't. I've owned both in the past and don't want either because they're both an absolute mess of advertising. I currently have an Apple TV and an Android tablet. Jellyfin is okay on Android (and I emphasize okay and not amazing or great), but the Apple TV is may main viewing device and Swiftfin is the best option and still miles behind Plex.

Particularly because on Apple TV with Plex you can override built in subs with the closed caption styles, meaning literally all subs that aren't explicitly burned into the image can be made consistent and easy to read. Haven't seen that feature anywhere else, including on the Shield TV/Pro (I used to own one, got rid of it when Android TV updated to the ad-riddled version it is today). It's a really amazing feature IMO to be able to have full control of subtitle font, size, style, color, outline, and spacing, no matter what you're watching.

It certainly doesn't cost what they're charging. They have a cache, a relay and an auth service. I'll grant them some more allowance for an active security team. They've wasted manyears on features nobody wants and have eliminated any feature that costs them any amount of money to maintain if they can't make money off it. (sync, client serve, yada yada)

Really? Cuz Jellyfin literally does the same thing and doesn't cost money.

Really? Because folders on a hard drive and the OS's networking does all that... what am I missing?

Just a little infrastructure....

First you're going to need to run it in Docker, so you can make it RO to your FS, because by running it bare-metal, the first time there's a hole in security, they're going to be straight in your NAS, and JF is very lax on security with the stated reason that they don't want people to rely on their security. (no client 2fa, no open support for fail2ban only their wish.com attempt at it, no closing off endpoints if you're not logged in)

Then you're going to need to install traeffik, caddy or npm, setup lets encrypt yourself. that needs a dns provider and a name.

You still have no facilities for device 2FA, Your logged out enpoints are still going to serve content. If any of the packages those endpoints use have a vulnerability, every JF server out there will be immediately vulnerable.

The whole point behind locking every action behind the login is so that you only have to worry about the surface area provided by the login.

Then the DB (and hence the search) is still going to be dog slow, the music app isn't going to let you pre-load the next song in your client, don't come at me with your 500 item movie/music collection and tell me it's fast enough. There are no proper hooks for elasticsearch even if i wanted to do "a little setup of infrastructure"

I run Jellyfin because it's the moral right thing to do and Plex will eventually enshitify enough for everyone to leave, but other than occasional bug fixes, they're not in the same class of software.

I even considered rolling up my sleeves to help. I pulled the codebase down, That DB change has been in the hopper for years now, they outright refuse to go 2fa or change logging to support fail2ban. They're just not willing to greenlight the architectural changes they need and they're already fixing bugs.

Yeah but any authentication I cannot control, is to me, not that secure. I can't even log into my Plex setup from work because even though it is hosted at my home, it requires a connection to Plex's infrastructure for login and I haven't been able to find any OIDC options to use my own IdP. I'm definitely in the minority of their users for wanting to be able to use my own personal authentication.

You can't say their service hasn't gotten worse though :)

I paid $75 USD, but they took my plugins, (pour one out for youtube on plex for my DanTDM obsessed kid back in the day) made my interface hard to navigate, try constantly to shove their own content down my (and my users) throats. Hey, remember when you used to have that sync feature that kept you up to date with a selection of titles, then you could use the client on your phone to serve to other phones even offline, god that was awesome with kids on vacation.