317
People who are staying on Plex, have you tried Jellyfin? What about it do you not prefer? (real question) (discuss.online)
submitted 4 months ago by to c/selfhosted@lemmy.world
457 comments fedilink hide all child comments
 

Honest question, because I know multiple people who are not looking to jump ship since they already have the Plex Pass.

you are viewing a single comment's thread
view the rest of the comments
[–] [S] 0 points 4 months ago (6 children)

What about exposing through Pangolin tunnel, Cloudflare Tunnel, Tailscale Funnel approach? Would that allow proper client access?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 9 points 4 months ago (3 children)

    Same problem regarding security because if you leave it up to jellyfin to do auth you are betting on the wrong horse. With pangolin auth in front of it you have the same problem as before. Clients can't handle the additional auth.

    Or am I misunderstanding the concept of tunnels wrong? I am using pangolin as a reverse proxy with nice VPN management included. How do you the tail scale style "connect this client to this network that has the jellyfin server on it" thingy?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 1 point 4 months ago (2 children)

    You have a VPS that relays the pangolin tunnel and a reverse proxy serving the tunnel through a cloudfare + fail2ban protected domain. It should be really cheap since the vps only really runs for the initial auth and connection, and once in a while to update the tunnel IPs. You just give people a domain and a credential for the client.

    It sounds complicated but isn't really. I did it once but then returned to plain tailscale since I don't really share my server with many people.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 4 months ago

    I'm still not seeing how this solves the issue. You either use Cloudflare or your reverse proxy as the auth, which is secure but then people can only use your Jellyfin server through a web browser, or you publish actual Jellyfin and use its auth, but now you rely on its poor security.

    Are you saying you integrate fail to ban with Jellyfin's auth? If so that's alright, but won't stop anyone from using an exploit, just brute force attacks. I'm still also not sure why the VPS is required at all.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 4 points 4 months ago (1 child)

    Cloudflare doesn't allow streaming large quantities of data through their tunnels. At least it's against their ToS.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 4 months ago

    When setup with tunnels, cloudflare doesn't see any media traffic. Cloudflare only needs to serve the auth and handshakes. The actual traffic is IP to IP, TLS encrypted if you setup a domain correctly. Or just use something like tailscale that sets up the certificates and domains for you.

  • permalink
  • fedilink
  • source
  • parent