Submitted 1 year ago by iHUNTcriminals@lemm.ee to selfhosted@lemmy.world
Kind of a quick off the cuff question… but is it difficult to get a docker hosted jellyfin server accessible outside of lan safely?
I have tailscale and a VPN I can use for my own devices but would like to be able to access it safely without needing those.
If you are not behind a CGNAT, it should be as easy as opening the necessary ports.
I have a reverse proxy running in ports 80, 443 and can safely access Jellyfin on a subdomain without issues from outside my LAN.
To get it outside the LAN, you just need to forward the port it uses in your router. Example 8096 for regular http requests. I would highly recommend getting at least a reverse proxy with an SSL cert.
Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I’ve seen in this thread:
| Fewer Letters | More Letters |
|---|---|
| CGNAT | Carrier-Grade NAT |
| NAT | Network Address Translation |
| SSL | Secure Sockets Layer, for transparent encryption |
| VPN | Virtual Private Network |
[Thread #204 for this sub, first seen 9th Oct 2023, 21:05] [FAQ] [Full list] [Contact] [Source code]
You can but it will cause security issues. You will need to buy a domain and setup a SSL proxy with https to proxy traffic in. After than I would lock down you firewall rules and make sure that a compromise can’t escape the isolated environment.
Also make sure you docker container is hardened against excaping as it will improve security when a security hole is discovered in jellyfin
SheeEttin@lemmy.world 1 year ago
Stick with the VPN. No point in exposing more services with possible security vulnerabilities.
doeknius_gloek@feddit.de 1 year ago
I love Jellyfin but I would absolutely not make it accessible over the public internet. A VPN is the way to go.
iHUNTcriminals@lemm.ee 1 year ago
Yeah I’m thinking maybe just have family sign up for tailscale.
eluvatar@programming.dev 1 year ago
Oof, that’s bad… And lazy
Gooey0210@sh.itjust.works 1 year ago
Why “absolutely” not?