Comment

Comment on How do I host Jellyfin in the most secure manner possible?

Run in at home and get Tailscale setup with a Headscale server, or just use Tailscale straight out of you want. That’s the simplest.

I have no idea how to do this. Do you have any resources? Does it cost a subscription fee?

A better option would be getting an OpenWRT router

This is what I have planned. OpenWrt Two my beloved

You’ll have many different options for decentralized and NAT traversing VPNs with this option. GL.Inet Flint is a great choice.

I also don’t know how to do this. Resources are much appreciated :)

source

Sort:hotnew top

just_another_person@lemmy.world ⁨1⁩ ⁨week⁩ ago
Okay, so let me explain a bit:

Tailscale is a commercial client that is semi-FOSS. It’s built on Wireguard, which is FOSS, but the cloud hosted architecture does cost money after I think 5 clients.

Headscale is a FOSS implementation of Tailscale, and totally free to host, skipping the above.

Tailscale itself is super easy to use, and you just install it on a node, register it, and then it has access to any other device on that secured network. So if you install it on your Jellyfin machine at home behind your normal firewall, then install it on your phone, you’ll be able to connect to it without forwarding ports for messing around with much.

It should be that simple.

source
- sem@lemmy.blahaj.zone ⁨1⁩ ⁨week⁩ ago
  Iirc it supports 100 clients on the free tier, but even that is a soft limit – I’ve heard that they will accommodate more devices if you ask (and you’re in a non-commercial setting)
  
  source
- Charger8232@lemmy.ml ⁨1⁩ ⁨week⁩ ago
  Does Headscale conflict with ProtonVPN/Mullvad VPN (i.e. can I use those alongside Headscale)? Android has a limited number of VPN slots, so that’s why I ask.
  
  source
  - just_another_person@lemmy.world ⁨1⁩ ⁨week⁩ ago
    Nope. Wireguard runs outside the same protocols.
    
    source
    Charger8232@lemmy.ml ⁨1⁩ ⁨week⁩ ago
    So:
    
    ProtonVPN is installed on my Android phone
    
    Android has Always-on VPN enabled
    
    Android has Block connections without VPN enabled
    
    Host Jellyfin on my Raspberry Pi 5
    
    Install Headscale on my Raspberry Pi 5
    
    Install Headscale on my Android phone
    
    Install a Jellyfin client on my Android phone
    
    Configure everything
    
    And that will work? It will be encrypted during transit? And only run on the LAN? Does ProtonVPN need to allow LAN connections (I assume it does)?
    
    source
    -> View More Comments