How would you handle a mother in law at a retirement community with a Roku and no access to the router that serves the condo?
Comment on Help an idiot protect his homelab and few services exposed to the internet.
heyeddi@lemmy.world 3 days ago
Get Jellyfin off the open internet. For family who’ll never install a VPN app, the setup that holds up is WireGuard on their router, or Tailscale on whatever TV box they use, set up before it ever ships to them. They never see it. If something has to stay public, CrowdSec plus Pocket-ID is a lot lighter than Authentik for three users. I’m building a home box that ships locked down like this by default, so I’m curious: which broke first for your family, remote access or the logins?
blue_morpho@lemmy.world@lemmy.world 3 days ago
Klox@lemmy.world 2 days ago
Get a router/travel router and set it up as a gateway where it provides its own SSID for the Roku to connect to. A lot of them have baked in Tailnet/Wireguard support. iNet are generally good products.
meltedcheese@c.im 2 days ago
neo2478@sh.itjust.works 3 days ago
Yeah that’s kinda my situation as well, but they have a firestick.
awelo@tuiter.rocks 3 days ago @Blue_Morpho @heyeddi
Something like tailscale could be the solutionblue_morpho@lemmy.world@lemmy.world 2 days ago
There’s no tailscale for Roku.
smiletolerantly@awful.systems 2 days ago
Jellyfin on the open internet is FINE.
Agreed.
Secure it properly and you wont be pwned instantly.
My setup:
WAN -> OPNsense -> CrowdSec on FW and docker server -> Traefik -> Authelia middleware -> Jellyfin.
Yes, first party apps are broken but the browser works good enough and if I meed it, I have a VPN for myself.
Relatives get web browser or I’ll consider a S2S VPN setup.