Side-to-side Wireguard VPN if you want to keep it simple service wise. Tailscale/Headscale vor Netbird if you want a relatively easy way to set it up and are okay with a bit of overhead.
Selfhosted
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
-
Be civil.
-
No spam.
-
Posts are to be related to self-hosting.
-
Don't duplicate the full text of your blog or readme if you're providing a link.
-
Submission headline should match the article title.
-
No trolling.
-
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details.
Resources:
- selfh.st Newsletter and index of selfhosted software and apps
- awesome-selfhosted software
- awesome-sysadmin resources
- Self-Hosted Podcast from Jupiter Broadcasting
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
Wg-easy makes wireguard ... Easy.
Yes, you are correct. Unfortunatly some options and use cases of "regular" are not covered by wg-easy. If you're behind a CGNAT or want to use dual stack it's better to learn and stick to basic Wireguard.
If it is in two different houses, why would you use a NAS as a client for jellyfin ? You'd better connect an android TV box like an nvidia shield and connect to the jellyfin.
Of course, the jellyfin instance should be accessible over the internet, either by setting up a reverse proxy or a VPN.
You're right, this makes the most sense and with little headaches. I didn't go with it at first cause I didn't know there was an alternative to Amazon/Google/Xiaomi devices to access Android TV, so thank you for the Nvidia Shield recommendation, I'll check it out (and yes I know Android TV is Google, but it's for a very occasional use, so I'll give up a bit of privacy just for this)
Personally, I just installed another launcher for my shield (projectivy launcher) so I don't have to deal with annoying advertising. You could also replace the stock OS with a foss android TV, but I haven't tried it myself so I can't tell you if it works well or not.
Tailscale and the other tools people mention is an option.
Another one that’s a bit more costly unless you already have it is UniFi gear can do site-to-site VPN which can make it pretty easy as well. Other router gear has it as well, UniFi just makes it easier. This would put each others networks next to each other and you could access them as if they’re in the same home.
And then of course just wireguard direct connection.
There’s a lot of options, matters only how DIY you want to make it.
Unless you have fiber at the house with the server, you’ll probably run into issues with streaming these ways without transcoding, even with transcoding gear… cable upload speeds and reliability can be middling.
What you may want to do is use something like Tailscale (or a VPN) to connect the two sites (homes) together.
Run your Tailscale setup in home A, and then in home B connected to your tailnet. You can install Tailscale on the home router of home B, or install it on any device that needs to connect to home A.
Then in home B you just connect to your Jellyfin server like you normally would if you were in home A. This could be a android box or smart tv for example or accessing it through a browser on a pc. (If those devices have Tailscale installed and are connected to your tailnet in home A)
Using a VPN like Tailscale would also mean you don't expose your Jellyfin to the internet.
Or headscale, or plain wireguard if you have any qualms about the tailscale servers that moved from Canada to the USA several years ago.
i use netbird. i gorgot why i did not choose tailscale but netbird ine my research
I found Netbird significantly easier to set up
Thanks, I'll give Netbird a try on my server A for routing incoming traffic from friends & family, and for my original issue I think it's easier if I use an android tv adapter/device like the other commenter said
Netbird is EU based, maybe that’s why you chose it
Advertise/present the services to the internet, or merge the networks or devices together using a service like Tailscale.
Oh true, merging them together in a Tailscale network kinda makes sense, I hadn't thought of that thank you
I advise strongly against advertising jellyfin directly to the Internet. Maybe through a reverse proxy, but based on the question I have to say no.
Reverse proxies do not give you security.
You are right. I was thinking they provided better login services, but in reality the best they can do is force a port and offload your certs.