A while back there was a situation where outsiders could get the name of the contents of your Jellyfin server, which would incriminate anyone. I believe it’s patched now, but I don’t think Jellyfin is winning any security awards. It’s a selfhosted media server. I have no frame of reference for knowing whether or not any of my information was overkill and I’m sure there are even some out there that would say I didn’t go far enough, even.
I had a neighbor about 6 years ago that blasted rap at full volume every evening.
rap booming in the background
one fine day
"hmmm, what were these headphones on bt again? wait… soundbar. I don’t have a soundbar.
hmmm, I wonder"
device paired
Jellyfin>Artists>… Meshuggah
Obzen
Combustion
play
Volume 100%
“I think I’ll go to the store for a while!”
Here, since you can’t use a search engine: https://www.cvedetails.com/vulnerability-list/vendor_id-22884/product_id-81332/Jellyfin-Jellyfin.html
More, because I’ve been around this lap before, you’ll ask for more and not believe that one, here’s another: https://www.cvedetails.com/vulnerability-list/vendor_id-22884/product_id-81332/Jellyfin-Jellyfin.html
Do what you want. Idgaf about your install, just mine.
I question this, and really, their availability.
With prep-time, any prosecutor and crew could dig up every tiny detail about you in about a week, including every single site any related IP addresses to you have been to and how much time you spend there and all of your dns queries.
But here, on the spot. “You tell us”.
Their lack of effort is correlated to the amount of spite they have for any individual person. It’s like using a magnifying glass. If they actually gave a shit, they wouldn’t have to ask.
I figured infodump style was a bit easier for me at the time so anyone could take anything I namedropped and go search to their heart’s content.
He’ll be crawling around xmpp chatrooms talking about anarchists soon.
one of us
one of us
one of us
Jellyfin isn’t secure and is full of holes.
That said, here’s how to host it anyway.
If you aren’t using Tailscale, make your VPS your main hub for whatever you choose, pihole, wg-easy, etc. Connect the proxy to Jellyfin through your chosen tunnel, with ssl, Caddy makes it easy.
Since Jellyfin isn’t exactly secure, secure it. Give it its own user and make sure your media isn’t writable by the user. Inconvenient for deleting movies in the app, but better for security.
more…
Use fail2ban to stop intruders after failed login attempts, you can force fail2ban to listen in on jellyfin’s host for failures and block ips automatically.
More!
Use Anubis and yes, I can confirm Anubis doesn’t intrude Jellyfin connectivity and just works, connect it to fail2ban and you can cook your own ddos protection.
MORE!
SELinux. Lock Jellyfin down. Lock the system down. It’s work but it’s worth it.
I SAID MORE!
There’s a GeoIP blocking plugin for Caddy that you can use to limit Jellyfin’s access to your city, state, hemisphere, etc. You can also look into whitelisting in Caddy if everyone’s IP is static. If not, ddns-server and a script to update Caddy every round? It can get deep.
Again, don’t do any of this and just use Jellyfin over wireguard like everyone else does(they don’t).
“no, these missiles only bust the bunkers we tested them on.”
Gamers will be fine, it’s bad news for Fedora.
Man, I feel like sick, lemme check my health watch.
status: unhealthy
Can I receive healthcare?
no
Very. I get sick just smelling it.
Rofl if they dump them on ebay as new from a third party US shipper.
The majority of people eat at McDonalds. It doesn’t make it a good idea on your finances or health. Sheep gonna baa.
If you for some reason think that megacorporations and big tech aren’t monetizing the literal majority to the fullest extent of every single law they can break while getting away with it, you need to wake the fuck up. Big time. I don’t know if this is some psyop from leddit or what but my doors stay closed, my android plays tablet mode with no sim. Thanks tho.
“Do you guys not have laptops?”
So is my edc to match it lmao.
Phones are locking down and getting harder to get rom and root support and a lot of projects are either giving up or dying.
Welp! Back to the laptop I go! Been carrying it with me everywhere just like I did before I got a smartphone. The only duties my phone needs to do is make calls, answer SMS and RCS and tether.
Every year is the year
That’s their problem. If their messages aren’t encrypted, it isn’t like you won’t be aware of it. Request that they use a modern client and get with the times. None of this is an actual problem without easy solutions.
I like how Lemmy somehow still finds negativity here. Never change lmao.
An internet celebrity in the millions of followers is going FOSS. Cheer up. On the downstream, this may bring Lemmy more users and put more visibility on open software.