131
Jellyfin over the internet (startrek.website)

What’s your go too (secure) method for casting over the internet with a Jellyfin server.

I’m wondering what to use and I’m pretty beginner at this

(page 3) 50 comments
sorted by: hot top controversial new old
[-] bl_r@lemmy.dbzer0.com 1 points 2 weeks ago

Tailscale, with nginx for https.

Very easy, very simple, just works, and i can share my jellyfin server with my friends

[-] overload@sopuli.xyz 1 points 2 weeks ago

This is the easiest way for sure.

[-] lycanrising@lemmy.world 0 points 2 weeks ago

no idea how safe or secure but i use cloudflare tunnel to point my jellyfin port on my computer

[-] StopSpazzing@lemmy.world -1 points 2 weeks ago

Someone mentioned above that cloudflare will ban you for streaming through their tunnel. Just be warned.

[-] lycanrising@lemmy.world 1 points 1 week ago

yeah it’s in the terms of service but my usage will be so small it’s not even going to register on their charts so i’m happy with the risk.

[-] snowflocke@feddit.org 0 points 2 weeks ago

We have it open to the public, behind a load balancer URL filtering incomming connection, https proxied through cloudflare with a country filter in place

[-] Darkassassin07@lemmy.ca 0 points 2 weeks ago* (last edited 2 weeks ago)

An $11/yr domain pointed at my IP. Port 443 is open to nginx, which proxies to the desired service depending on subdomain. (and explicitly drops any connection that uses my raw ip or an unrecognized name to connect, without responding at all)

ACME.sh automatically refreshes my free ssl certificate every ~2months via DNS-01 verification and letsencrypt.

And finally, I've got a dynamic IP, so DDClient keeps my domain pointed at the correct IP when/if it changes.


There's also pihole on the local network, replacing the WAN IP from external DNS, with the servers local IP, for LAN devices to use. But that's very much optional, especially if your router performs NAT Hairpinning.

This setup covers all ~24 of the services/web applications I host, though most other services have some additional configuration to make them only accessible from LAN/VPN despite using the same ports and nginx service. I can go into that if there's interest.

Only Emby/Jellyfin, Ombi, and Filebrowser are made accessible from WAN; so I can easily share those with friends/family without having to guide them through/restrict them to a vpn connection.

load more comments (1 replies)
load more comments
view more: ‹ prev next ›
this post was submitted on 26 Jun 2025
131 points (99.2% liked)

Selfhosted

48610 readers
135 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS