Comment on How do I host Jellyfin in the most secure manner possible?
just_another_person@lemmy.world 1 week ago
Run in at home and get Tailscale setup with a Headscale server, or just use Tailscale straight out of you want. That’s the simplest.
A better option would be getting an OpenWRT router and start building proper infrastructure for doing something like this. You’ll have many different options for decentralized and NAT traversing VPNs with this option. GL.Inet Flint is a great choice.
Charger8232@lemmy.ml 1 week ago
I have no idea how to do this. Do you have any resources? Does it cost a subscription fee?
This is what I have planned. OpenWrt Two my beloved
I also don’t know how to do this. Resources are much appreciated :)
just_another_person@lemmy.world 1 week ago
Okay, so let me explain a bit:
Tailscale is a commercial client that is semi-FOSS. It’s built on Wireguard, which is FOSS, but the cloud hosted architecture does cost money after I think 5 clients.
Headscale is a FOSS implementation of Tailscale, and totally free to host, skipping the above.
Tailscale itself is super easy to use, and you just install it on a node, register it, and then it has access to any other device on that secured network. So if you install it on your Jellyfin machine at home behind your normal firewall, then install it on your phone, you’ll be able to connect to it without forwarding ports for messing around with much.
It should be that simple.
sem@lemmy.blahaj.zone 1 week ago
Iirc it supports 100 clients on the free tier, but even that is a soft limit – I’ve heard that they will accommodate more devices if you ask (and you’re in a non-commercial setting)
Charger8232@lemmy.ml 1 week ago
Does Headscale conflict with ProtonVPN/Mullvad VPN (i.e. can I use those alongside Headscale)? Android has a limited number of VPN slots, so that’s why I ask.
just_another_person@lemmy.world 1 week ago
Nope. Wireguard runs outside the same protocols.