Comment on Jellyfin over the internet

borax7385@lemmy.world ⁨1⁩ ⁨month⁩ ago

• pHr34kY@lemmy.world ⁨1⁩ ⁨month⁩ ago

  If your reverse proxy only acknowledges jellyfin exists if the hostname is correct, you won’t get discovered by an IP scanner.

  Mine’s on jellyfin.[domain].com and you get a completely different page if you hit it by IP address.

  If it does get found, there’s also a fail2ban to rate-limit someone brute-forcing a login.

  I’ve always exposed my home IP to the internet. Haven’t had an issue in the last 15 years.

  source

  • douglasg14b@lemmy.world ⁨1⁩ ⁨month⁩ ago

    Please to see: github.com/jellyfin/jellyfin/issues/5415

    Someone doesn’t necessarily have to brute Force a login if they know about pre-existing vulnerabilities, that may be exploited in unexpected ways

    source