Jellyfin activity is really nice to see. I have really liked it for the last several years, but activity means its a ongoing maintained project and that is awesome.
Also, thank you 1hitsong for all your contributions!
This appears to be an unauthenticated remote code execution bug on par with PHP2shell according to the dotnet CVE
not sure if jellyfin is affectedby the vuln though
General question: what is the easiest way nowadays to enable idiot-proof remote access? Still a Tailscale network?
I’m so ready to be done with Plex but I keep worrying about some elderly family that use my server.
I have it on reverse proxy to the world with libraries mounted read only
There’s no risk in doing this.
(I am invoking Cunningham’s Law)
Can you expand further on “no risk”? The software being exposed can still allow OS-level takeover just like all the other security vulnerabilities in the news the past week… You’re just relying on scale of internet and software coding strength it seems.
My parents have an Apple TV so I installed the Tailscale app (which they never have to touch) and Jellyfin (or Swiftfin, I can’t remember) and it’s fairly smooth for them.
I think it’s Netbird with their reverse proxy feature.
https://docs.netbird.io/manage/reverse-proxy
Netbird is like Tailscale, but Open Source. You don’t have to self-host, but you can. They have a reverse proxy feature that let’s you easily expose a device to the Internet. You can set basic authentication on the service, like requiring a password to access the page or only allowing certain IPs to access the page.
I use this with my parents. I got tired of the Tailscale app on the Google TV constantly shutting down. With the reverse proxy, there’s no more VPN app. My service is publicly accessible, but protected by an IP allow list.
deleted by creator
