Comment on That's all folks, Plex is starting to charge for sharing
MaggiWuerze@feddit.org 2 weeks agoI would rather stop sharing completely before I make a Jellyfin accessible to the internet with the state their Backend is in. If you want people to be able to use it on TVs, Jellyfin is also not an option because most of them don’t support vpns
rumba@lemmy.zip 2 weeks ago
You could throw Authelia or HAProxy in front of it.
You could do a port knocking daemon.
Tailcale is available and free on half a dozen different video viewing devices.
There’s about a million ways to skin that.
Also, keep in mind, it was a Plex security vulnerability In a lastpass admins home box that caused their asses to get leaked.
None of this shit deserves to be openly hosted online
MaggiWuerze@feddit.org 2 weeks ago
Everything besides VPN breaks their clients because they can’t handle authentication.
My main gripe isnt even that they have these issues, but the way the jellyfin devs are handling, or more correctly, not handling them.
They actively refuse to fix them because it might break client support. Instead of forcing an update or starting a secured v2 of their API, that actually active clients could then update to, they just do nothing
rumba@lemmy.zip 2 weeks ago
Using something to whitelist the firewall doesn’t require any client changes. For the less technically competent it could be as simple as setting their TV’s web browser to default to the white list page.
Haproxy could be convinced to whitelist people based on DNS entries. Each one of your remote consumers could set DNS to their house and once a day HA proxy would rewrite itself to match those addresses. If they’re coming in from a fixed client, The DNS would white list and let them in, If they failed the IP check they would pop a login so you could still use the service via the web.
It’s a hassle,It’s nowhere near as elegant is what plex is doing but without a data center…
They really could stand to add TOTP to the clients and server. I wonder if they’re open to pull requests. It can’t be that hard to add the option to the server than the clients can pick it up whenever they get around to it.