after almost 15yrs my plex server is no more. jellyfin behind nginx with authentik is running very nicely.

deleting my plex vm via terminal

top 99 comments

sorted by: hot top controversial new old
[+] 109 points 1 year ago (2 children)
  • [–] 51 points 1 year ago (2 children)

    i love jellyfin i just wish there was a nicer way to highlight collections so you could make themed weekly or monthly collections of movies and shows that also still show up in the regular folders.... almost like netflix.

  • source
  • hideshow 2 child comments
  • [–] 7 points 1 year ago

    I'm probably mistaken, but I think there might actually be a plugin for this? I haven't looked into it myself but I swear I scrolled past a plugin listing similar functionality at some point. Or I could be hallucinating. Or it could even exist but no longer work on the current version of the app. Who knows!?

  • source
  • parent
  • [–] 64 points 1 year ago* (last edited 1 year ago) (13 children)

    I've been using jellyfin for years.

    My best recommendation is DELAY UPDATES and back up before you update.

    I have a history of updates breaking everything so you should be careful about them.

    All software recommends backing up before an update, but for jellyfin the shit is real, you really want to back up.

  • source
  • hideshow 13 child comments
  • [–] 38 points 1 year ago (4 children)
  • [–] 6 points 1 year ago (3 children)

    Updating immich brings excitement into my life :)

  • source
  • parent
  • hideshow 3 child comments
  • [–] 0 points 1 year ago (1 child)

    It’s funny, I’ve heard this so many times. And read through the docs. But I’m a mad lad who has auto updates (I know!) and have never had an issue with Immich.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 17 points 1 year ago* (last edited 1 year ago)

    I've been using jelly since just after the emby fork and never had an update issue on docker. Automatic snapshots every 5 mins (amoung other backup tools). means I don't need to worry much if it does.

  • source
  • parent
  • [–] 13 points 1 year ago

    I have Jellyfin running for years too and it has never broken for me, I use Linuxserver image, so maybe they delay the updates a bit?... Now, Immich has broken so many times that nowadays is the only docker I don't keep at latest (and I know using latest is a bad practice, I understand the reasons, but the convenience of not worrying about the versions beats all that for me)

  • source
  • parent
  • [–] 3 points 1 year ago (4 children)

    Like the version or the media?

  • source
  • parent
  • hideshow 4 child comments
  • [–] 6 points 1 year ago (2 children)

    I have it on docker with two volumes, ./config and ./cache

    I back up those before each update.

    A bad Jellyfin update should not mess with your media folder in anyway. Though you should have backups of those aswell as a rule of thumb.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 10 points 1 year ago (1 child)

    With respect to the media, you can mount the volume as read only, preventing Jellyfin from accidentally wiping your underlying content.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 39 points 1 year ago (7 children)

    I'm also 90% done migrating to jellyfin. I've had the instance running for 6 months now, the cultural change to watch jellyfin is complete, except for my wife's iPad.

    Heck, I should just retire Plex. That will force the change.

    These are the thoughts of a cold and calloused sysadmin. Didn't get the email about the change? Too bad.

  • source
  • hideshow 7 child comments
  • [–] [S] 25 points 1 year ago

    yeah it took me about 6 months with jellyfin to feel like i was ready to finally kill plex. the thing that finally did it was getting an email from plex asking if i'd like to check out whats streaming on hbomax.

  • source
  • parent
  • [–] 4 points 1 year ago (5 children)

    What are you using to watch jellyfin on iOS?

  • source
  • parent
  • hideshow 5 child comments
  • [–] [S] 4 points 1 year ago (1 child)
  • [–] 1 point 1 year ago

    Swiftfin is what I'm using for Plex on my Apple TV

    It's perfect for me because it supports direct stream and decoding of the file for playback on the Apple TV - because the Apple TV is capable enough to do that.

    This is ideal because my NAS server is a venerable but now very long in the tooth HP Gen 8 microserver from 2014, so it doesn't have the chops for reencoded streaming anymore.

  • source
  • parent
  • [–] 14 points 1 year ago (5 children)

    Long time Jellyfin user here, welcome on board. I think biggest hurdle I should newbies warn about is the lack of availability on TizenOS.

    Its possible but needs some extra steps.

  • source
  • hideshow 5 child comments
  • [–] 3 points 1 year ago (3 children)

    not OP, but this has reared its ugly face once or twice with my friends.

    i have been running into another issue, though it may be a firefox issue: playing some filetypes fail to play on web browser but work fine on jellyfin app (i believe my settings are correct for hardware decode on server where it can)

    i still have to put some time into figuring it out tho (havent really done my research yet)

  • source
  • parent
  • hideshow 3 child comments
  • [–] 13 points 1 year ago (7 children)

    I am still using Kodi. It is feeling a bit long in the tooth in current year, but I can’t complain. I tried Plex because chromecasting is a feature I would love. Sadly it didn’t support the ISOs of my 1:1 rips. Maybe it does now (I stopped waiting for them years ago). As for Jellyfin, they seem to have an anti-ISO stance. One of the devs seemingly (or someone claiming to be a contributor) said I should convert all my media to a more modern format and make my own menus because it would be fun. Oh well, Kodi it is.

  • source
  • hideshow 7 child comments
  • [–] 13 points 1 year ago (6 children)

    i've never heard of anyone that keeps dvd menus around. like, i get it for archival purposes but i would never want to actually navigate a menu when i want to watch something. in my mind it's like sitting through the commercials on a rented vhs. i would probably store a converted copy as well, in a format that would let me specify from the application what track and subtitle i want so i can set a default.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 9 points 1 year ago (3 children)

    Blu-ray menus do kind of suck, but they are still mostly good enough to make all the supplemental material accessible (assuming the studio bothered to provide any anymore). But DVD menus (at least during that earlier golden age) add a layer to the experience I never knew I had been missing.

    The Rocky Horror Picture Show has some dancing fishnet legs and sexyhorror lips dancing around. You get to see so many extras and choose two versions of the movie and AND a secret Easter egg third version. A smorgasbord. Same for Terminator 2: two good versions of the movie and that lame Star Trek-ish ending one was hidden and I love having the option to not watch it. Plus many more. Fight Club is the only one I can think of to make use of that camera angle swapping button. The DVD versions of Dragon’s Lair and Space Ace wouldn’t work any other way.

    Perfect way to kill time when others go for a last minute toilet visit or decide to make popcorn. I am not going to the trouble of transcoding my entire library to get less.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 6 points 1 year ago (2 children)

    i ripped all my dvds specifically to get rid of the menus because they were slow, hard to use, and full of frustrating animations. they usually just felt like an afterthought.

    i've never been one to be swayed by extras, it usually just feels akin to jingling keys to get me to buy shit. maybe i'm weird.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 1 year ago (1 child)

    Streaming services don’t include any extras. Torrents (so I am told but I would never do that, myself, haha) are just the movie and maybe subtitles but nothing else. I doubt you are in the minority. Anyway, we are both afforded options to enjoy however we like. (Just wish I had chromecast support, but I will live). Cheers.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 36 points 1 year ago (4 children)

    Plex still good for the boys that bought the lifetime pass. I understand why people would change. But it's still the best plug and play option. Waiting until they break the "lifetime" thing and fuck us over.

  • source
  • hideshow 4 child comments
  • [–] 9 points 1 year ago (3 children)

    Didn't that already happen? Or am I misremembering?

  • source
  • parent
  • hideshow 3 child comments
  • [–] 7 points 1 year ago (2 children)

    Mostly not yet. They did restrict the bandwidth on relay, but anyone with half a brain can open a port and that still allows apps to direct connect without relay. Honestly I wish could just force it to never relay since randomly my iPad will use relay even when I’m on the same network but that’s more because the new iOS app since the rewrite is dogshit.

    Lifetime pass since 2012 here.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 12 points 1 year ago

    Wouldn’t containers make more sense for some of these rather than full blown VMs?

  • source
  • [–] 10 points 1 year ago (2 children)
  • [–] 19 points 1 year ago (13 children)

    I just wanna get rid of Plex so bad but jellyfin isn't going to work for my grandma....

  • source
  • hideshow 13 child comments
  • [–] 9 points 1 year ago*

    Host both. Keep plex up for your gma, Jellyfin for everyone else. Tbh Jellyfin is also pretty intuitive. Currently I'm hosting both, but my gma doesn't use it, so I'll probably move completely to Jellyfin.

  • source
  • parent
  • [–] 5 points 1 year ago* (2 children)

    The people asking why confuse me...y'all acting like jellyfin is easy to use on an off-site tv when it's literally not for non tech savvy people. I don't understand why jellyfin just doesn't nut up and make an samsung tv client or something?

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 1 year ago (1 child)

    My 67 year old Mother has been using Jellyfin for years via Chromecast. Change the TV input to Chromecast and pull up the Jellyfin app. And that's it. She never leaves Jellyfin and the Chromecast is never shut off, even if the TV is.

    It's amazing to me that you fanboys pretend like Plex is easy to use but Jellyfin is somehow not. It's generally the exact same interface.

    I don’t understand why jellyfin just doesn’t nut up and make an samsung tv client or something?

    Because application development is expensive, and they're open source--not funded by corporate interest like Plex. What exactly about that is difficult to understand?

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 1 year ago* (1 child)

    I've heard people had luck with Tailscale playing nicely with non Plex options. I can't say I've tried it. Though I do use Tailscale. Essentially if you setup Tailscale for Grandma it'll be like she's sitting on your local network. Even better, set it up on her router and you can literally debug all her Internet problems if you can ping it.

    Beyond that a raspberry pi with a battery backup on a 4G subscription connected to the router. That would be the ultimate "grandma" setup. Connect her router/modem power to remote power cycle. But I digress.

  • source
  • parent
  • hideshow 1 child comment
  • load more comments (1 reply)
  • [–] 9 points 1 year ago (1 child)

    Does jellyfin do untranscoded video/audio?

    Haven't used it in years but finally building up my media server again and I remember it had some funky settings for hardware encoding back then which I didn't need because I was connecting to it via a repurposed gaming laptop that could easily handle 4k content and surround sound by itself.

  • source
  • hideshow 1 child comment
  • [–] 15 points 1 year ago

    I use jellyfin for unencoded audio and video on my clients that support it like my newer television, but I also use transcoded audio video on things that can't handle the higher codecs like the raspberry pi.

  • source
  • parent
  • [–] 8 points 1 year ago

    Right? Jellyfin is awesome

  • source
  • [–] 7 points 1 year ago (1 child)

    I just got Authentik / Traefik going for Navidrome, Jellyfin is next.

    Does it play well for the mobile applications? If you use them?

  • source
  • hideshow 1 child comment
  • [–] [S] 4 points 1 year ago

    the ldap auth works great for the apps. apps dont play well with an oidc login process. i ended up using both, oidc for web and ldap fall back for applications. made it easier for my non tech inclined users. most of the current apps also support quick connect, like the plex link process. you auth on a web browser and enter a code into the app. so it's possible to use only oidc for log in and, i believe it should be possible use css to even hide the user name and password fields.

  • source
  • parent
  • [–] 13 points 1 year ago* (6 children)

    i have a lifetime plex pass, but I'd consider moving to jellyfin when their closed-captioning support reaches parity with plex. i regularly spin up a jellyfin container to try it out, but i still run into issues. And jellyfin's android apps are mediocre (in particular android auto support), especially for music compared to plexamp

  • source
  • hideshow 6 child comments
  • [–] [S] 2 points 1 year ago

    that's about where i was at for a long while. manet finally replaced my apple carplay functionality from plexamp and plex lost it's last advantage for me. i definitely got my moneys worth from that lifetime plexpass though.

  • source
  • parent
  • [–] 1 point 1 year ago

    For some reason I get permission errors on jellyfin every time I use it. Never with Plex. I've gone through the steps to fix it before. But when you change your shit as much as I do. I just stay with Plex because it's plug and play. And I have the pass. I don't have the time to fuck with stupid shit with jellyfin.

  • source
  • parent
  • [–] 6 points 1 year ago (2 children)

    How did you set up Jellyfin with Authentik? Are you using SSO or is it only through LDAP?

  • source
  • hideshow 2 child comments
  • [–] [S] 5 points 1 year ago (1 child)

    i ended up doing both. ldap for the apps. oidc for web based users and the apps that support the quick connect feature. the local user account system works fine too, and ldap would be enough. i just wanted an excuse to play round with sso systems, and it was fun figuring out how to connect all my servers.

    authenik has a good docs site for both it's docker container and connecting it to jellyfin. Authelia looked interesting too.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 21 points 1 year ago (21 children)

    I've heard jellyfin has a lot of security issues, which I don't know if that's accurate or not. But the BIGGEST issue is lack of a proper tvOS app. I really don't feel like using Infuse or some other app just to use my library. Year after year I hear about people switching and yet, the gap is simply still there.

  • source
  • hideshow 21 child comments
  • [–] 14 points 1 year ago (6 children)

    I’ve heard jellyfin has a lot of security issues

    The biggest known stuff I saw on their GitHub is that a number of the exposed service URLs under the hood don't require auth. So, it's open-source with known requirements, you can tell easily from the outside that it's running, and you can cause it to activate a LOT of packages without logging in. That's a zero-day in any package that can be passed a payload away from disaster.

    AS far as TVOS, I'm kinda surprised swiftfin doesn't service you.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 6 points 1 year ago (1 child)

    Assuming this is all true, sure its not great but how much does it matter?

    Most have jellyfin in a docker. My jellyfin can't only has read only accses to the media folder. Only the config folder has write access. Assuming the worst case scenario here, how much damage can than do?

  • source
  • parent
  • hideshow 1 child comment
  • [–] 6 points 1 year ago

    A lot of neophyte self hosters Will try running the binary in Windows instead. Experienced self hosters will indeed use docker.

    Then out of the ones that are using docker some of them will set it up as privileged.

    And then how many of those people actually make read-only versus how many just add the path and don't think about it.

    Don't confuse your good practices with what the average person will do.

  • source
  • parent
  • [–] 2 points 1 year ago

    swiftfin is mostly there but doesn’t support media segments, which is a deal breaker for me

    really unfortunate since jellyfin media segments is a much better implementation of the concept than plex

    i’m watching the swiftfin issue for when it gets added and i’ll be all over compiling and testing it

  • source
  • parent
  • [–] 0 points 1 year ago (2 children)

    Yeah… that’s a non-starter for me. Not gonna risk my entire home lab when Plex doesn’t have any of that risk.

    Also, running in Docker is fantastic but I’ve found Docker to be unstable at times depending on the version.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 1 year ago (1 child)

    Oh, Plex has the risk. A vulnerability in Plex is how LastPass lost all their source code. A vulnerability in Tautulli which he had ported outside surfaced his auth token, then he was able to use the auth token to get into Plex and they were able to hit an rce vulnerability and pull the entire git repo the guy had locally.

    The key difference is Plex at least has a security team and their name on the line with their investors.

  • source
  • parent
  • hideshow 1 child comment
  • load more comments (1 reply)
  • [–] 10 points 1 year ago (2 children)

    I am also not up to date on Jellyfin security issues but the biggest one I care about is that its clients don’t support OIDC. There’s a neat plugin for OIDC, but without client support it only works with the web client and I’m not a fan of leaving login pages open to the internet.

  • source
  • parent
  • hideshow 2 child comments
  • [–] [S] 6 points 1 year ago

    if you use the oidc connection and apps that support quick connect you can do it. you basically end up doing things like the plex link process that got implemented when they forced everyone into their authentication service. i almost went that route but opted to leave the password auth from ldap in. its the kind of log in process most people are used too and i've got a few elderly users. i disabled password reset in authentik though and everyone gets a 3 word 24 char minimum password.

  • source
  • parent
  • [–] 5 points 1 year ago (5 children)

    Op already said they were behind authentik

    There also absolutely are apps for tv oses like Android, I use one daily.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 4 points 1 year ago* (last edited 1 year ago) (4 children)

    I think they meant Apple's "tvOS" - which powers the Apple TV set top box.

    There's no client for it, if I had to take a guess it's likely due to the costs of doing so.

    Edit: Whoops, it appears I'm a bit out of date on this.

  • source
  • parent
  • hideshow 4 child comments
  • [–] [S] 8 points 1 year ago (2 children)

    https://github.com/jellyfin/Swiftfin i've got 5 apple tv users, two android tv and one webostv

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 1 year ago (1 child)

    Oh interesting, it's been a while since I have tried to use Apple TV (roughly 7 years or so - I don't use any Apple devices anymore), this wasn't available at the time so I'm glad to see there's finally some native support.

  • source
  • parent
  • hideshow 1 child comment
  • [–] [S] 3 points 1 year ago

    there's been a LOT of progress on jellyfin, especially the past year or so. i've been using plex since it forked from xbmc, it ran on the bottom half of a laptop connected to a mostly working projector, both rescued from a dumpster. it's been a fantastic platform for a long time. but i've also wanted off plex since they rolled out the plex account req. jellyfin is finally there for me at least.

  • source
  • parent
  • [–] [S] 3 points 1 year ago (1 child)

    https://github.com/jellyfin/Swiftfin is available for tvOS. works great for me with one bug. since i have homepods connected to one of my apple tv's as it's speakers. i had to change the setting to use the native video player instead of vlc to avoid and audio delay bug. that cost me the auto play next episode function. i though not auto playing the next episode would annoy me, but it's turned out to not be a issue at all. but infuse doesn't include that bug if you want both homepod tv speakers and auto play next episode with jellyfin. as for security, since jellyfin is more modifiable it has a lot more room for misconfiguration for sure. plex had plenty of it's own security issues, we just only heard about them when some security blogger discovered it.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 1 year ago

    misconfiguration here i think is a dangerous way to phrase it… it implies that there is a secure way to run jellyfin on its own. jellyfin, by itself, should never be exposed to the www. it is, no matter the configuration, insecure. to run jellyfin on the www you must put a VPN or other reverse proxy with auth over the top of it

  • source
  • parent
  • [–] 3 points 1 year ago*

    I just validated that the latest version of the LDAP privilege escalation issue is not an issue anymore. The curl script is in the ticket.

    This was the one where a standard user could get plugin credentials, such as the LDAP bind user, and change the LDAP endpoint. I.E., bad.

    I chose this one because after going through all of them, it was the only one that allowed access to something that wasn't just data in Jellyfin.

    So for me, security is less of an issue knowing that, as only family use the service, and the remaining issues all require a logged in user (hit admin endpoint with user token).

    Plus, I tried a few of those and they were also fixed, just not documented yet. I didn't add to those tickets because I was not as formal with my testing.

    @EncryptKeeper@lemmy.world

  • source
  • parent
  • load more comments
    view more: next ›