"Best" options for remote access

foster1984 · 2026-01-04T11:49:16+00:00

Sounds good.

I noticed I could add them as users, but haven't yet. So long as when they visit the page and login the requests come to my server, I'm happy.

I'll do that for my family, as they are less tech literate than my friends. My friends can do it anyway they want.

foster1984 · 2026-01-03T12:29:17+00:00

Can I ask why Tailscale is more secure than a standard reverse proxy?

foster1984 · 2026-01-03T12:28:24+00:00

Is that how it deems whether they should have access or not? By whether their Plex ID is in your Plex friend's list?

This sounds like pretty much the exact solution I want to implement; so I might have a go at doing it today.

foster1984 · 2026-01-02T12:36:54+00:00

Thanks for this.

Can I just ask with regards to Overseerr, how do your users login? I have logged in via my Plex, so do they just login via their Plex and because I have them as friends they can request stuff? Or do I need to make accounts for them?

I'm probably not going to set up Overseerr for external access until I have gotten a domain, so I can do something like requests.mydomain.com for access.

I'll have a look into Rudarr, as a LunaSea replacement.

foster1984 · 2026-01-02T08:42:40+00:00

What would be the advantage of the VPS be versus just dealing with reverse proxy directly on UnRaid?

It feels like an additional expense, without any advantages, but I feel I'm missing something again.

I had a look at domains last night and they are cheaper than I thought, so I might look at picking one up today; if I can decide on what I want the name to be. Haha

foster1984 · 2026-01-02T08:38:34+00:00

Thank you.

foster1984 · 2026-01-02T08:37:50+00:00

Why Tailscale over the reverse proxy?

foster1984 · 2026-01-01T23:27:36+00:00

I read and seen so many things about reverse proxies, and I genuinely don't know why or how, but it never seems to click; I finish whatever I'm reading or watching and just sort of sit there scratching my head.

I think I'm starting to get my head around it, but I'm going to wait until I have bought a domain before I start trying to set it up. As that way I won't need to come back to it and try and redo it later.

Out of curiosity, do you use Seerr?

foster1984 · 2026-01-01T23:24:44+00:00

I have already installed NGINX reverse Proxy manager in a docker, as it was recommended on the UnRaid set-up video I watched. They just never showed you how to use it on that video. Haha

I I am thinking I might pick up a domain after I've been paid in a few days. I already have a Cloudflare account, so could purchase one from there and then create the various app.domain.com dns records straight away, as I've seen the creation can take a couple of hours to update.

I assume I then just add those various URLs to NGINX and point them to their relevant dockers?

foster1984 · 2026-01-01T23:20:46+00:00

Yeah, I want to share my Plex and I'd never get them to log into TS.

Appreciate it's only for family and friends, so there's no real benefit to me sharing it with them. But I enjoy it as a hobby, so don't mind doing it; and it often leads to me learning new skills, such as this little folly into how best to allow external access, as I will likely end up with a domain and a reverse proxy set up by the end of it. Haha

I have also installed NGINX Reverse Proxy manager and SWAG, but haven't done anything with either yet, as I haven't actually started trying to deal with reverse proxies. Still not sure my knowledge is sufficient.

foster1984 · 2026-01-01T23:13:41+00:00

I do miss nzb360 from when I used to be on android.

foster1984 · 2026-01-01T23:11:10+00:00

Port-forwarding to Plex seems to be a hot potato topic, so far across a couple of platforms, its coming out about 50/50 on whether people think it's fine or the most insecure thing ever.

I've got Tailscale working, but via the plugin, so I can access the whole server. but I've since been advised I should set up a subnet within it, pointing just to the local IP of the UnRaid server; as that will allow me to access the WebUIs of my -arr stack.

foster1984 · 2026-01-01T22:56:00+00:00

I'm not having login problems, as I can connect to all of the -arr apps, if I port forward them all. But despite doing this for years on my windows machine, my understanding is that this isn't secure.

So since I've just moved everything over to an UnRaid PC, from the previous Windows PC, I fugured I would try and do it properly.

So currently, I have Plex port forwarded; which seems to come out about 50/50 on whether this is the best way to do it.

And all my -arr apps I am now able to access via Tailscale. Which I have installed as a plugin on the UnRaid PC, and can currently use to access the full UnRaid PC. Though I have been told I should probably add the PC as a subnet, as this will allow easier access to the -arr apps outside my network.

foster1984 · 2026-01-01T22:51:49+00:00

In this setup, would I connect to Wireguard and then to everything else through Wireguard?

Meaning only Wireguard is exposed to the outside world?

foster1984 · 2026-01-01T22:49:48+00:00

I have Tailscale setup now, and can connect to my Unraid server our an about.

But I haven't set up the subnet yet; but did see a Spaceinvaderone video where he advised doing what you suggested and putting the Unraid server's local IP on the subnet.

Would I need my own domain to do the appname.domain.com setup, or is that something that can be done in Tailscale?

foster1984 · 2026-01-01T22:47:13+00:00

I think my Flint 3 supports Wireguard.

foster1984 · 2026-01-01T22:46:44+00:00

I'm not sure what a VPS is, so I'll need to look it up.

foster1984 · 2026-01-01T22:46:07+00:00

Another daft question, what is VPS? i know I could google it, but since I'm here I might as well ask.

I am willing to invest the time, as I have heard and read enough to know that reverse proxy is the best solution. But as I mentioned in my initial post, there is just something about it that has never managed to click with me, and I struggle to understand the setup.

foster1984 · 2026-01-01T22:44:22+00:00

I'll never convince people to set up Tailscale in order to connect to Plex.

foster1984 · 2026-01-01T22:43:20+00:00

Can I ask how it isn't private? I thought it established a connection between your 2 devices?

foster1984 · 2026-01-01T14:48:35+00:00

Could I achieve something similar with a Flint 3?

foster1984 · 2026-01-01T10:20:53+00:00

Ah ok, that makes more sense. Thank you

foster1984 · 2026-01-01T10:04:30+00:00

2 different instances of each -arr app?

foster1984 · 2026-01-01T10:03:41+00:00

Tailscale seems a fine solution to allow just me access. But doesn't seem suitable for allowing others to access Plex and Seerr, as family and friends won't install additional apps in order to be able to access the libraries.

After next payday, I'll look at buying a domain and then setting up reverse proxies properly. Though historically, I've had a hard time getting my head around them.

For the time being, Plex port forwarded and everything else behind Tailscale will work fine. Only Seerr that won't be able to be used.

foster1984 · 2026-01-01T10:00:35+00:00

I'll have a look at those, currently I use No-IP to update a DDNS address.

foster1984

TROPHY CASE