Comment on Plex is locking remote streaming behind a subscription in April

• couch1potato@lemmy.dbzer0.com ⁨2⁩ ⁨weeks⁩ ago

  My home connection is behind cgnat so I got a free VPS from oracle, install caddy on VPS, install tailscale on VPS and router, expose routes from LAN to tailscale network.

  Now you can use caddy to expose, for example, a docker container (jellyfin) at 192.168.1.100 to subdomain.exampledomain.com with ssl cert provided by caddy.

  VPS also requires some other stuff like ddclient and fail2ban.

  I pieced this all together myself… it’s doable if you spend some time reading.

  source

  • Nibodhika@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

    That exposes Jellyfin to the internet

    source

    • couch1potato@lemmy.dbzer0.com ⁨2⁩ ⁨weeks⁩ ago

      Yes exactly. What do you think plex is doing?

      source

      • Nibodhika@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

        Using a relay server to separate online from home connection

        source

        • -> View More Comments
• lickmygiggle@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

  Reverse proxy

  source

  • Nibodhika@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

    That exposes Jellyfin to the internet, so it’s my option 1.

    source

    • lickmygiggle@lemmy.world ⁨1⁩ ⁨week⁩ ago

      Nope.

      source
• inclementimmigrant@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

  It’s not that hard to get a reverse proxy up, get a free DDNS, and a SSL certificate from let’s encrypt.

  www.linuxserver.io/…/2020-08-21-introducing-swag

  This is a pretty solid one stop shop for handling all reverse proxy for jellyfin and other applications like sonarr, radarr, transmission, ombi and lists of others.

  source

  • Nibodhika@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

    That exposes Jellyfin to the internet, so it’s not the same feature

    source

    • inclementimmigrant@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

      And somehow you think that Plex isn’t exposing your server to the Internet for streaming while not on your local network?

      Okay there Mr. Madison.

      source

      • Nibodhika@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

        It’s not, not directly at least, and that’s what everyone is ignoring here. You probably understand the value on Authelia/Authentik but you’re failing to see that the Plex relay server is taking that same mantle here, so even if someone managed to compromise the relay server it’s still not on your home server, whereas exposing jellyfin directly to the internet only requires one service to be compromised.

        source
    • LeninOnAPrayer@lemm.ee ⁨2⁩ ⁨weeks⁩ ago

      My dude if you are connecting from outside your local network you are “exposed” to the Internet in some way. What magic are you thinking Plex is doing? Is someone hand deliverying the packets via USPS?

      source

      • myliltoehurts@lemm.ee ⁨2⁩ ⁨weeks⁩ ago

        Plex runs relay servers where your Plex server will connect to the relay and your player will also connect to the relay, making both ends of the connection egress type as far as routing and access control goes. …plex.tv/…/216766168-accessing-a-server-through-r…

        It’s optional and likely not everyone uses it, but this provides a way for Plex to do remote streaming without the Plex server being reachable directly from the internet.

        Separately, it costs money for Plex to run.

        source
      • Nibodhika@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

        In some way is different from directly, on Plex you’re behind a relay server so it’s akin to being behind a VPS running Authentik/Authelia in front of the service on your home. Compromising the relay server does not necessarily compromises your home server, so it’s not direct like putting Jellyfin on a reverse Proxy would be.

        source