▲ 197 ▼ How would you expose Jellyfin securely without a vpn? (discuss.online) submitted 5 months ago by kiol@discuss.online to c/selfhosted@lemmy.world 164 comments fedilink hide all child comments Assuming the user will not be connecting over vpn, but is both remote and non-technical, how would you expose Jellyfin to them securely?
[–] crypt0cler1c@infosec.pub 7 points 5 months ago (6 children) Why no VPN? permalink fedilink source hideshow 6 child comments replies: [–] bhamlin@lemmy.world 16 points 5 months ago (2 children) VPNs are not trivial to use for normies. permalink fedilink source parent hideshow 2 child comments replies: [+] onlyhalfminotaur@lemmy.world -6 points 5 months ago (1 child) Way easier than reverse proxies IMO permalink fedilink source parent hideshow 1 child comment replies: [–] vividspecter@aussie.zone 38 points 5 months ago They mean on the client side most likely. A reverse proxy will be transparent to the user. permalink fedilink source parent [–] halcyoncmdr@piefed.social 19 points 5 months ago (2 children) Yeah, let me just walk my normie friends and parents through setting up a VPN on their TV so they can stream their shows. permalink fedilink source parent hideshow 2 child comments replies: [–] Fedegenerate@fedinsfw.app 1 point 5 months ago I stuck a rPi in their houses that runs pihole+nginx+tailscale. As far as they're concerned they go to https://jellyfin.example.domain and they're there. Better yet, they go to http://homarr.notlocal and they have nice little icons to click on, that take them to all the front-end services I run. They get pihole goodness for free. Their homepage is attached to their pihole if they want to pause/stop it. I'd like to set them up to be more declarative than I have, setup/updating is a pain. Nix is interesting but the learning curve is too steep for the effort I'm willing to put in. As per usual, being lazy will end up being more work for me in the long run. permalink fedilink source parent [–] crypt0cler1c@infosec.pub -1 points 5 months ago Sounds annoying but doable. No need to be offended I'm just asking why VPN is being ruled out. permalink fedilink source parent
[–] bhamlin@lemmy.world 16 points 5 months ago (2 children) VPNs are not trivial to use for normies. permalink fedilink source parent hideshow 2 child comments replies: [+] onlyhalfminotaur@lemmy.world -6 points 5 months ago (1 child) Way easier than reverse proxies IMO permalink fedilink source parent hideshow 1 child comment replies: [–] vividspecter@aussie.zone 38 points 5 months ago They mean on the client side most likely. A reverse proxy will be transparent to the user. permalink fedilink source parent
[+] onlyhalfminotaur@lemmy.world -6 points 5 months ago (1 child) Way easier than reverse proxies IMO permalink fedilink source parent hideshow 1 child comment replies: [–] vividspecter@aussie.zone 38 points 5 months ago They mean on the client side most likely. A reverse proxy will be transparent to the user. permalink fedilink source parent
[–] vividspecter@aussie.zone 38 points 5 months ago They mean on the client side most likely. A reverse proxy will be transparent to the user. permalink fedilink source parent
[–] halcyoncmdr@piefed.social 19 points 5 months ago (2 children) Yeah, let me just walk my normie friends and parents through setting up a VPN on their TV so they can stream their shows. permalink fedilink source parent hideshow 2 child comments replies: [–] Fedegenerate@fedinsfw.app 1 point 5 months ago I stuck a rPi in their houses that runs pihole+nginx+tailscale. As far as they're concerned they go to https://jellyfin.example.domain and they're there. Better yet, they go to http://homarr.notlocal and they have nice little icons to click on, that take them to all the front-end services I run. They get pihole goodness for free. Their homepage is attached to their pihole if they want to pause/stop it. I'd like to set them up to be more declarative than I have, setup/updating is a pain. Nix is interesting but the learning curve is too steep for the effort I'm willing to put in. As per usual, being lazy will end up being more work for me in the long run. permalink fedilink source parent [–] crypt0cler1c@infosec.pub -1 points 5 months ago Sounds annoying but doable. No need to be offended I'm just asking why VPN is being ruled out. permalink fedilink source parent
[–] Fedegenerate@fedinsfw.app 1 point 5 months ago I stuck a rPi in their houses that runs pihole+nginx+tailscale. As far as they're concerned they go to https://jellyfin.example.domain and they're there. Better yet, they go to http://homarr.notlocal and they have nice little icons to click on, that take them to all the front-end services I run. They get pihole goodness for free. Their homepage is attached to their pihole if they want to pause/stop it. I'd like to set them up to be more declarative than I have, setup/updating is a pain. Nix is interesting but the learning curve is too steep for the effort I'm willing to put in. As per usual, being lazy will end up being more work for me in the long run. permalink fedilink source parent
[–] crypt0cler1c@infosec.pub -1 points 5 months ago Sounds annoying but doable. No need to be offended I'm just asking why VPN is being ruled out. permalink fedilink source parent