Comment on How to secure Jellyfin hosted over the internet?
dan@upvote.au 2 months ago
Is it just you that uses it, or do friends and family use it too?
The best way to secure it is to use a VPN like Tailscale, which avoids having to expose it to the public internet.
paequ2@lemmy.today 2 months ago
I’ve been using Tailscale for a few months now and this is my only complaint. On Android and macOS, the Tailscale client gets randomly killed. So it’s an extra thing you have to manage.
It’s almost annoying enough to make me want to host my services on the actual internet… almost… but not yet.
Lem453@lemmy.ca 2 months ago
I use plain wireguard on me phone, always on essentially with no issues. I wonder why tailscale app can’t stay open.
beerclue@lemmy.world 2 months ago
Same, wireguard with the 'WG Tunnel" app, which adds conditional Auto-Connect. If not on home wifi, connect to the tunnel.
Lem453@lemmy.ca 2 months ago
I just stay connected to wireguard even at home, only downside is the odd time I need to chromecast, it needs to be shut off.
dan@upvote.au 2 months ago
You don’t need this with Tailscale since it uses a separate IP range for the tunnel.
paequ2@lemmy.today 2 months ago
I suspect that it goes down and stays down whenever there is an app update, but I haven’t confirmed it yet.
Does the plain wireguard app stay up during updates?
Lem453@lemmy.ca 2 months ago
Android wireguard all hasn’t been updated in 18mo. Its extremely simple with a small code base. There basically isn’t anything to update. It uses wireguard kernel module which is itself is only like 700 lines of code. It so simple that it basically became stable very quickly and there is nothing left of update right now.
git.zx2c4.com/wireguard-android/about/
Byter@lemmy.one 2 months ago
If you make Tailscale your VPN in Android it will never be killed. Mileage may vary depending on flavor of Android. I’ve used this on stock Pixel and GrapheneOS.
Under Settings > Network and internet > VPN
Tap the Cog icon next to Tailscale and select Always-on VPN.
paequ2@lemmy.today 2 months ago
Holy moly, I did not know this existed! Thanks! Just turned this on!
loutr@sh.itjust.works 2 months ago
Look up your phone on dontkillmyapp.com and make sure tailscale is excluded from battery and network “optimization”.
kalkhas@lemmy.ml 2 months ago
Have you tried disabling battery optimization for tailscale?
dan@upvote.au 2 months ago
I did this and it still seems to randomly disconnect.
dan@upvote.au 2 months ago
Yeah my wife and I are both on Android, and I haven’t been able to figure out why it does that.
The Android client is open-source so maybe someone could figure it out. github.com/tailscale/tailscale-android
ladfrombrad@lemdro.id 2 months ago
It loses its foreground notification I’ve found that kills it for me even thou the Quick Toggle and the app itself, shows as running
Image
Image
If I disconnect/reconnect the notification comes back, and I’ve found something even more weird on my device (A Xiaomi with its infamous OOM / background app killer…) is Tailscale still actually works fine most of the time without the foreground notification. I’m hazarding a 70% of the time for me?
A lot of us a while back found v1.5.2 fugged around with the persistent notification going RIP
github.com/tailscale/tailscale/issues/10104
LiveLM@lemmy.zip 2 months ago
Oh the Quick Toggle has never, ever worked correctly. I hoped they fixed it after the UI refresh update but unfortunately not yet.
LiveLM@lemmy.zip 2 months ago
Oh the Quick Toggle has never, ever worked correctly. I hoped they fixed it after the UI refresh update but unfortunately not yet.
fmstrat@lemmy.nowsci.com 2 months ago
Try WG Tunnel instead. It will reconnect on loss, but you lose the Tailscale features (no big deal with dynamic DNS)
0x0@programming.dev 2 months ago
Maybe headscale will do better?
dan@upvote.au 2 months ago
Headscale is a replacement for the coordination servers, which are only used to distribute configs and help nodes find each other. It won’t change client-side behaviour.