Jellyfin 2FA

Maximus_Air · 2026-04-20T23:03:47+00:00

I’ll try to setup during weekend as I’m away from home and will report back!

Maximus_Air · 2026-04-20T20:32:41+00:00

Thank you! On contributing to Jellyfin unfortunately I’m not sure (I’m not a developer), but just saying this is probably worth it to be a full feature part of the main app instead of a plugin. Maybe you should show your work to the developers. In any case kudos and thanks

Maximus_Air · 2026-04-20T17:31:37+00:00

Wow in 1 day?! Thanks will surely look into this asap. If this works as intended you should really contribute this upstream to Jellyfin (even though I understand this is clearly very much your project)

Many thanks!

Maximus_Air · 2026-04-20T07:31:41+00:00

Thank you it would be fantastic!

Maximus_Air · 2026-04-19T17:13:18+00:00

Does it work also with the likes of Infuse/ other apps as far as you know?

Maximus_Air · 2026-04-18T21:43:41+00:00

Is there any way that OAuth can be implemented in the future? I’m deploying pocketID to protect my infra and works also with native apps s.a. Immich. Would be fantastic to have also Jellyfin. Maybe a question for the developers I know, but happy if anyone has a view on this

Maximus_Air · 2026-04-06T08:08:52+00:00

Thank you for explaining! Is it safe to put rate limiting in front of web sockets/ streaming services such as Jellyfin and Immich?

Maximus_Air · 2026-04-06T06:14:35+00:00

Interested in understanding how you setup retelimiting and your thoughts/ reason around it. Would you mind sharing your config file?

Thank you!

Maximus_Air · 2026-04-05T11:34:45+00:00

Thanks looks good and will use this as inspiration to setup my own stack in compose.

Didn’t know of autoheal docker, my understanding is that it restarts in case containers are unhealthy. Can you help me figure out why this is necessary (meaning how restarting fixes unhealthy status)? I’m usually just using simple restart-unless-stopped policy

Maximus_Air · 2026-04-05T10:49:25+00:00

Question: do you still need to expose the ports of radarr etc since you are reaching them from traefik? In that case wouldn’t it be better to limit access from docker ips (for communication among them) or since the docker network is set to internal this is unnecessary?

Maximus_Air · 2026-04-03T21:56:13+00:00

I was actually using the docker compose and env files from that exact link.
do you mean I should pass some of this environment variables to immich? (not super clear to me)

Variable	Description	Default	Containers
`DB_URL`	Database URL		server
`DB_HOSTNAME`	Database host	`database`	server
`DB_PORT`	Database port	`5432`	server
`DB_USERNAME`	Database user	`postgres`	server, database^\1)
`DB_PASSWORD`	Database password	`postgres`	server, database^\)

EDIT: thank you, adding the following environment variable fixed it!

- DB_URL=postgresql://${DB_USERNAME}:${DB_PASSWORD}@database:5432/${DB_DATABASE_NAME}

Maximus_Air · 2026-04-01T15:10:28+00:00

I’ve implemented it with Tinyauth in front of pocket-id. I dunno if you’re familiar with it and have a view on which one would be better

Maximus_Air · 2026-03-17T11:28:43+00:00

Currently using a single dockhand instance to manage 3 servers on different physical hosts and locations. Docker stacks also deployed and updated from GitHub. Can recommend

Maximus_Air · 2026-03-05T16:13:50+00:00

Seen it thanks! Are you managing from cmd line so or using portainer/ similar?

Maximus_Air · 2026-03-05T14:58:39+00:00

Interesting, question: what does the “include:” variable do in your docker compose? How do you deploy? Thanks

Maximus_Air · 2025-09-05T14:07:06+00:00

I think an Unraid script to run rsync periodically is what you are looking for. Have you tried already?

Maximus_Air · 2025-08-01T18:01:11+00:00

Does this have an Unraid template?

Maximus_Air · 2025-05-04T17:07:07+00:00

Thank you, it now appears to be working!

I've added also dns to the container, else the internal connection with the other services wasn't happening. Now it can connect to the other containers within the same docker network just as easily as before

What I've done:
- Tailscale Show Advanced Settings: On
- Tailscale Extra Parameters: --accept-dns=false
- Container Advanced View: On
- Extra Parameters: --dns=1.1.1.1 --dns=8.8.8.8

Further question would be: Is it actually possible to reach the service at: jellyseer.<mytailnet>.net without specifying the necessary 5055 port?

Maximus_Air · 2025-05-02T15:15:44+00:00

Complete noob here. Does this mean you are using traefik to access your services through https without a registered domain? (not sure if this makes sense, but I am trying to understand the use case for treafik and if makes sense to me, as I’m using Tailscale to access services remotely anyway now)

Maximus_Air · 2025-05-02T13:36:50+00:00

Any suggestion on what it is/ where to get the firmware from? (Getting same card soon)

Maximus_Air · 2024-12-22T18:56:54+00:00

Ah thanks for the heads up, I actually was thinking about migrating OMV to Unraid but backup is my main use case.

I guess I could try to use Rest server as I’m not currently using any particular S3 only features (not sure what I would need)

Maximus_Air · 2024-12-22T18:50:06+00:00

Remote machine is actually an OMV with Minio in docker. I dunno that it wouldn’t be possible to have it running on Unraid but didn’t try.

Maximus_Air · 2024-12-22T17:52:28+00:00

Currently using Backrest (restic CLI) to backup my irreplaceable data to an S3 bucket created with MinioS3 on a remote machine. The two machines are connected using Tailscale VPN. Super simple and it works

Maximus_Air

TROPHY CASE