Live data from Hacker News

Jellyfin: The Free Software Media System

jellyfin.org

241–250 of 292 posts

Re: Jellyfin: The Free Software Media System

#241

Earlier quoted context omitted.

You should absolutely hand off the security to something else - just exposing this publicly is asking to get hacked. I use Wireguard for my private online stuff, that works nicely. Expose Jellyfin only on the loopback address and use Nginx to forward your domain to it, then setup your DNS entry to be the VPN address of your server. Just be aware that if you have your own local DNS server then you might need to config…

Can you easily use your services on mobile devices that way? I currently reverse proxy every service I need through nginx, but I kinda feel like this isn't enough security-wise. I did blacklist most countries and don't expose any port other than 80+443. Does it require you to run a VPN app on your phone constantly and does that cause troubles?

iOS etc have wireguard clients, but I personally have found it much easier to configure a long random path as part of the server URL and use that as a "password". (https://server.com/$randomPath/

It's not ideal, since the password's obviously saved in any user's browser history, but it's less of a pain than dealing with a VPN, especially since I let friends use the server, and it's secure enough for my threat model.

Re: Jellyfin: The Free Software Media System

#242

Earlier quoted context omitted.

Yes Jellyfin does accept PR's but they don't accept hacks ie workarounds for single issue for a particular device won't be accepted easily. The maintainers feel using hacks and workarounds is not the best way to go for the long term maintenance of the project. One of the reasons skip intro took so long to get into jellyfin and jellyfin clients as they wanted a universal media segment system that can be used for other…

sounds like you don't approve of the devs healthy approach to the development of this project, but would rather sacrifice long term sustainability for quick wins.

I think it sounded like that because of the lack of commas rather than a bias from GP

Re: Jellyfin: The Free Software Media System

#243
post #37

Bemused by the number of people complaining about a free and open source project. A quick review of the git history tells me that it’s maintained by a very small group of people who generously work on this in their free time. Luckily jellyfin does accept PRs, so if you think the project needs improvements, then perhaps folks, you can do something about it

Being free does not exempt a project from criticism. It's not like they were yelling about how terrible the project team was, just saying the issues they were having when trying to use it.

I do not disagree, there are horrible free projects with actively user-hostile documentation out there. But jellyfin is not that. Most criticism of it that I have heard falls either under a matter of taste ("I would do it differently"), a specific hardware setup not being supported or a skill issue during the installation which has more to do with administration of networks and Linux servers than with jellyfin.

And as a user of jellyfin myself I don't think these are particularly fair points of criticism.

Re: Jellyfin: The Free Software Media System

#244

Earlier quoted context omitted.

Can you easily use your services on mobile devices that way? I currently reverse proxy every service I need through nginx, but I kinda feel like this isn't enough security-wise. I did blacklist most countries and don't expose any port other than 80+443. Does it require you to run a VPN app on your phone constantly and does that cause troubles?

iOS etc have wireguard clients, but I personally have found it much easier to configure a long random path as part of the server URL and use that as a "password". ( https://server.com/$randomPath/ It's not ideal, since the password's obviously saved in any user's browser history, but it's less of a pain than dealing with a VPN, especially since I let friends use the server, and it's secure enough for my threat model.

The trouble with that is that you still have to make 80/443 public, which means you have to trust that your web server will stand up to 24/7 probing. I guess I'm a bit more paranoid than I really need to be but if the port isn't open then the chances of a bad guy getting in that way because of a zero-day or because I forgot something should be zero.

Hopefully you at least have something like fail2ban installed?

Re: Jellyfin: The Free Software Media System

#245
post #34
post #20

Fun fact: Jellyfin runs natively on Windows. Combined with something like Cloudflare Tunnel it's probably the easiest way to host a media server without needing to be a Linux admin.

Cloudflare Tunnel only works if you access it via a web browser right? I'd prefer using Tailscale so that I can also access it in their native apps on Android and Android TV.

I'm not sure why it wouldn't work with the apps? I have my jellyfin server behind a CF tunnel and I can access it in the Android app by my domain.

Re: Jellyfin: The Free Software Media System

#246
post #6

My media center is a laptop with a broken screen, running Arch Linux and Kodi. Kodi has a web interface that you can stream to. Why might I want to add Jellyfin?

The most useful part of Jellyfin is on-the fly transcoding to whatever bit rate I want at any particular time, no matter where I might be. I've watched stuff off my server on a train with terrible connectivity by setting it to 360p. If you only watch at home, then it's probably not that useful to you. I also like all the library features and tracking my per episode watch history for shows.

Re: Jellyfin: The Free Software Media System

#247
post #239

Earlier quoted context omitted.

This is silly however for the typical use case of a web browser connecting to a server and very silly as default behavior.

I literally have seen that screen only once and then forgot about it. It's really not a big deal.

Well, that commenter seems to have chosen it as their single pet peeve against Jellyfin.
Post reply on HN