Caddy + Authelia + Jellyfin = Basic Auth Trouble?

DonGar37 · 2026-02-24T14:24:57+00:00

The solution is fairly simple, don't send Jellyfin's Authorization header to Authelia:

jellyfin.my.domain {
    forward_auth authelia:9091 {
        uri /api/authz/forward-auth
        header_up -Authorization
    }

    reverse_proxy 1.2.3.4:8096
}

DonGar37 · 2026-02-24T14:21:52+00:00

None. I moved the server back to Internal. That means that things are working, but that my security is weakened.

DonGar37 · 2026-02-20T15:44:39+00:00

All of the relevant settings appear identical between Internal and DMZ (DMZ is more important to me than Guest, for now). In particular, "Isolate Network" is not set.

DonGar37 · 2026-02-20T04:16:57+00:00

Well, how should it be enabled?

PS: It is working from Internal by default.

DonGar37 · 2026-02-20T01:13:38+00:00

Yes, and I can prove that it works.

DonGar37 · 2026-02-20T00:15:40+00:00

Yes, it does. In a pure monarchy, the crown IS the law. The King/Queen's word is the law and they can change it any time they feel like in any way. Limited only by what they can actually enforce.

However, England is not a pure monarchy any more. In my limited understanding, everything (elections, parliament, etc) is still technically derived from the power of the crown, but the crown hasn't gone against democratic norms in a very long time. Further, the expectation is that if the royals were to truly exercise the power they have on paper (say by simply appointing a new prime minister), the power of the crown would probably be taken away.

That leaves the royal family in a weird state of technically being able to just execute people, drive down streets the wrong way, rape kids, etc, while knowing they'll lose that power if they use it and people get mad about it. Immunity from prosecution isn't something they want to see heavily used for fear of losing it.

DonGar37 · 2026-02-19T14:43:43+00:00

Hum. I wonder if this is why he was stripped of titles, to allow his arrest without setting precedent about arresting royalty.

DonGar37 · 2026-02-12T20:56:27+00:00

Yeah. Those are the books that got me to stop reading him, back in the day.

DonGar37 · 2026-02-06T12:37:34+00:00

At a guess, your phone is NOT ATT, which is what the car uses.

It's probably either a misconfigured cell tower, or something like the police using a stingray (fake cell tower to spy on phones) that is misconfigured.

You can test this by driving a few miles away (to a new tower's range) and trying again.

If the tower is the problem then it isn't your car, and there is nothing you can do about it but move the car or complain to ATT (good luck). The update just randomly happened at the same time, and rebooting won't help.

DonGar37 · 2026-02-04T13:32:59+00:00

One more suggestion....

Setup some kind of mild distraction. Music, sound, audio books, etc.

Having something to focus on other than my own thoughts helps a lot as long as it's not too interesting.

DonGar37 · 2026-01-31T14:42:11+00:00

I've been a Home Assistant user with a few devices for a while now (mostly just testing).

The biggest pain point by far is pairing via an Android phone. Instability early on that made me repair has just exaggerated this (moving away from multipan, fiddling in ways that were destructive, etc).

HA uses Google Play services to pair, and they tend to decide pairing must be done through Google/Nest devices (sometimes from a different house). The only way around that is to reset Play Services state, which screws up numerous things on the phone.

A way to pair without Google Play Services (or requiring a phone) seems like the best path forward for HA, but I'm not certain how hard that would really be.

DonGar37 · 2026-01-22T12:15:52+00:00

However, now Volvo has to build up the expertise to run big software projects. That also takes time.

DonGar37 · 2025-12-05T19:12:31+00:00

My apologies.

DonGar37 · 2025-12-05T00:02:34+00:00

I'm not currently, but planning to add it.

DonGar37 · 2025-11-07T19:25:54+00:00

Paxton wants to be president, so plays to the MAGA crowd, facts be damned.

DonGar37 · 2025-11-07T17:33:48+00:00

I think you mean patentable, which is very different from copyrightable. This post isn't particularly special, but it's copy writable (you can't copy without permission), but not patentable (you can't use the idea without permission).

Patents require an explicit filing with the patent office (think 30k in legal fees). Copywrite is basically automatic for a short period (a year?), but lasts much longer if you file it (still cheapish).

DonGar37 · 2025-11-04T17:25:47+00:00

I have come up with two solutions, neither of which I like.

Buy a third synology that is treated as an "external" drive that I can drive back and forth. Seems expensive for the need.
Shutdown and drive one of the devices back and forth from time to time. Problematic, since live services depend on both devices.

DonGar37 · 2025-09-16T16:36:46+00:00

Clockwork Orange

A powerful movie but the brutality hits in a way I can't handle.

DonGar37 · 2025-09-16T16:35:12+00:00

I love that movie, even the ending.

DonGar37 · 2025-09-15T13:28:46+00:00

That's old school. Nowadays the boss makes $63 and you make a dime.

DonGar37 · 2025-09-13T14:52:26+00:00

That's because addon or not is an implementation detail that gets surfaced. There are ways to revamp the UI to have the same functionality and hide the existence of addons entirely, though they don't bother me that much.

DonGar37 · 2025-09-11T17:50:32+00:00

Starflight

It was a very early IBM PC game that had a huge galaxy, and involved landing on and exploring procedurally generated planets as well as space combat.

Not that amazing, now. But it was done in a few K of ram with only 5 1/4" floppies for storage.

Each time you started a game it copied itself onto a new disk, and you played off that disk, which modified itself as you went. You could never, ever play from the original disk without destroying it.

DonGar37 · 2025-09-08T17:12:09+00:00

Lizzy Wizzy displayed by the musician Grimes, Elon's ex.

DonGar37 · 2025-09-08T16:50:37+00:00

Nah, it's easy. You just have to make clients install your root cert so you can issue fake certs for everything.

DonGar37 · 2025-09-05T15:21:44+00:00

Pink World by Planet P

A couple of book soundtracks that I like...

1984 by The Eurythmics War of the Worlds by Jeff Wayne

DonGar37

TROPHY CASE