317
People who are staying on Plex, have you tried Jellyfin? What about it do you not prefer? (real question) (discuss.online)
submitted 4 months ago by to c/selfhosted@lemmy.world
457 comments fedilink hide all child comments
 

Honest question, because I know multiple people who are not looking to jump ship since they already have the Plex Pass.

you are viewing a single comment's thread
view the rest of the comments
[–] 26 points 4 months ago* (last edited 4 months ago) (8 children)

Problem is access outside your home for family and friends.

There are serious security gaps that make it a non starter to expose to the internet.

I've been using Jellyfin ever since they forked out of Emby, and honestly, it's the biggest complaint that I have. It is incredibly difficult to make it available to friends and family who are on various devices, networks, so on and so forth.

Whereas Plex "just works."

  • permalink
  • fedilink
  • source
  • hideshow 8 child comments
    •
  • [–] 2 points 4 months ago (1 child)

    Why not use a zero trust VPN like netbird? It is fully open source.

    You can create a reverse proxy that requires a password to get through to jellyfin. I think there is a limit of like 5 for this though (unless you pay or self host).

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 2 points 4 months ago* (2 children)

    Wait what? I have been sharing my jellyfin using a cloudflare tunnel to the endpoint.

    Could you elaborate on the security gaps? How can I pen-test myself to see if I'm vulnerable

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 4 months ago (2 children)

    What security gaps in particular? I did have to reverse proxy to get it to https, are there additional security issues?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 4 months ago (1 child)

    Exposed endpoints that have no authentication and various other things like that.

    It's application level security issues.

    If there is an older collation here https://github.com/jellyfin/jellyfin/issues/5415

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 4 months ago*

    thanks; for anyone looking, the issues have been split out at the bottom, none of them are addressed as of this writing. I don't know that I feel like they are that serious (most of them allow you to play things if you know an ID), but they are the kind of thing you'd see in a project where there are bigger security issues.

  • permalink
  • fedilink
  • source
  • parent