You really shouldn’t port forward Jellyfin. Hell, you really shouldn’t port forward anything. A domain is like a dollar per month. Use a reverse proxy with some sort of login gate like Authentik or Authelia.
If you’re only using it for yourself then there are a lot worse things that people do (like downloading apps for websites, using untrusted VPNs, or even just using the web)
Reverse proxy is more advanced and I think someone who needs it wouldn’t be worried about ease of use.
Just use a tunneling service like tailscale. Easy as fug to set up, and only people who know your credentials can poke about in your server.
If you remember to disconnect machines other than the server from the VPN when not using them and don’t share out the server too much, you don’t even have to spend money.
You don’t even need to remember to disconnect machines you can have a 100 different clients(is that the right word?) on a tailnet. Honestly it’s so sick and amazing it’s free
Nope, free allows for up to 3 users and 100 connected devices. And if you run it on your router, the entire network only counts as one device. So for instance, you and two of your friends could all join the same tailnet. Their business model is basically the same as WinRAR’s; give it to individual users for free, to get people on board. Then charge corporations to use it at scale, since the individual users already know how to use it.
The only reason I don’t personally use it is because my work WiFi blocks outgoing WireGuard connections. And that’s Tailscale’s biggest weakness in my experience; They tout themselves as a zero-config VPN, but that means you’re not able to config things if you need to. If I were able to flip over to OpenVPN or IKEv2/IPSec instead of WireGuard, I’d be fine. But Tailscale doesn’t have the ability to do that, because it would require configuration.
You really shouldn’t port forward Jellyfin. Hell, you really shouldn’t port forward anything. A domain is like a dollar per month. Use a reverse proxy with some sort of login gate like Authentik or Authelia.
If you’re only using it for yourself then there are a lot worse things that people do (like downloading apps for websites, using untrusted VPNs, or even just using the web)
Reverse proxy is more advanced and I think someone who needs it wouldn’t be worried about ease of use.
Just use a tunneling service like tailscale. Easy as fug to set up, and only people who know your credentials can poke about in your server.
If you remember to disconnect machines other than the server from the VPN when not using them and don’t share out the server too much, you don’t even have to spend money.
You don’t even need to remember to disconnect machines you can have a 100 different clients(is that the right word?) on a tailnet. Honestly it’s so sick and amazing it’s free
afaik (and I might be super wrong) you can have up to 100 machines IN the network, but only 3 connected at any given time in the free plan.
But yes, it’s sick and amazing either way.
Nope, free allows for up to 3 users and 100 connected devices. And if you run it on your router, the entire network only counts as one device. So for instance, you and two of your friends could all join the same tailnet. Their business model is basically the same as WinRAR’s; give it to individual users for free, to get people on board. Then charge corporations to use it at scale, since the individual users already know how to use it.
The only reason I don’t personally use it is because my work WiFi blocks outgoing WireGuard connections. And that’s Tailscale’s biggest weakness in my experience; They tout themselves as a zero-config VPN, but that means you’re not able to config things if you need to. If I were able to flip over to OpenVPN or IKEv2/IPSec instead of WireGuard, I’d be fine. But Tailscale doesn’t have the ability to do that, because it would require configuration.