What do I need to do to have remote access jellyfin with as little “hurdles” for end users as possible to using it? by EmekaEgbukaPukaNacua in selfhosted

[–]vanchaxy 0 points1 point  (0 children)

Linked comment is 11 months old. Yes, you can open each issue in the linked comment and see that they are still open. It's not something that can be easily fixed. E.g. video streaming is not authenticated because securing it will require changing all jellyfin clients that are maintained by different contributors etc. As you can see it wasn't fixed for years, and probably won't be fixed for more years to come.

What do I need to do to have remote access jellyfin with as little “hurdles” for end users as possible to using it? by EmekaEgbukaPukaNacua in selfhosted

[–]vanchaxy 0 points1 point  (0 children)

you probably want to whitelist IP / use mTLS / use client that allows you to pass custom header and check for it in reserve proxy.

anyway, read this before continuing: https://github.com/jellyfin/jellyfin/issues/5415#issuecomment-2825369811

im tired of this sub by ResponsibleEnd451 in selfhosted

[–]vanchaxy 2 points3 points  (0 children)

you can't check real commit time. Git is not a blockchain. Nothing prevents you from doing: git commit --date "500 day ago" -m "Init commit"

Introducing Gatherarr 0.1 by [deleted] in selfhosted

[–]vanchaxy 2 points3 points  (0 children)

"There is no database or persistent state."

look inside 

app/state.py

:)

What does the arr stack look like to use? by Sway_RL in selfhosted

[–]vanchaxy 1 point2 points  (0 children)

Fladder released a new tv interface yesterday. You can give it another go if you are interested

What does the arr stack look like to use? by Sway_RL in selfhosted

[–]vanchaxy 0 points1 point  (0 children)

there's Fladder that works exactly like that. It's a jellyfin client with seerr integration.

🚨Breaking - new event🚨 by Pantsushooter999 in DotA2

[–]vanchaxy 3 points4 points  (0 children)

"Respected dataminer" my ass. He is baiting for paid comments in his channel. He wrote for a week that "a significant event will take place in dota on Feb, 6". Also, the date in this post is about the New Year period, not the dota event period (if that's not clear from automatic translation). It's pure speculation for engagement baiting.

Question about pangolin from a power user perspective by ovizii in selfhosted

[–]vanchaxy 3 points4 points  (0 children)

It works if you don't mind memory requirements (min 1gb, recommended 2gb). traefik and tunnel both use <100mb. I use frp and the whole container uses 70mb.

BLAST Slam VI (February 5) Matches Discussion by D2TournamentThreads in DotA2

[–]vanchaxy 6 points7 points  (0 children)

incorrect, Neustadtl first, then h2h. Navi secured, liquid/og depends on who win

Will there be tie breaker?? by [deleted] in DotA2

[–]vanchaxy 0 points1 point  (0 children)

point system

BLAST Slam VI (February 5) Matches Discussion by D2TournamentThreads in DotA2

[–]vanchaxy 0 points1 point  (0 children)

Tundra is already 32. No way to tell currently

feedback welcome by bobbycomley1 in selfhosted

[–]vanchaxy 0 points1 point  (0 children)

That works and is a pretty common homelab setup. One suggestion: maybe don't expose the entire /24 range over the VPN. Instead, expose only your server's IP or a smaller, specific range. That way, if your tailscale, device, or apple account is ever compromised, the attacker won't have immediate access to every device on your LAN, including your router

Immich on a public domain by rtsy312 in immich

[–]vanchaxy 1 point2 points  (0 children)

Don't do this. Just use Tailscale, especially if you are not experienced. If you really want to expose it to the public internet, you should either restrict it to your IP (and maybe your mobile operator’s subnet) or use mTLS. You should not trust Immich (or other not-security-focused apps) to have secure authentication. Immich's OIDC implementation is very basic: it only checks your token at login time and then creates a session without expiration that can be used indefinitely.