Jellyfin: The Free Software Media System @lemmy.ml Oliper202020 @lemmy.world 2 mo. ago

local cloudflare alternative

hi is there any local cloudflare alternative becourse from my reading it seems that that using it for jellyfin is against cloudflares TOS and i would like to get jellyfin to my domain but i dont wanna pay for it, so a loxal alternative would probably be my best bet, i also would prefer not to open any ports

28 comments

Don't proxy jellyfin through CF.
Using it for the domain or subdomain is fine.

You know it's not proxied because the cloud is gray instead of yellow.
And if you ping the domain it's your own IP instead of a cloudflare ip.
- ohhh, so i can do it through cloudflare without breaking TOS? or am i misunderstanding?
  
  Nope. It's doable and permitted as long as the traffic is not proxied (gray cloud)
If you don’t want to open any ports, then you will need to setup a VPN service. Tailscale is one of the easiest to use VPNs out there.
- +1 for tail scale. I installed it to get a feel for how hard it'd be to setup. I had it running in 15min on multiple devices via the tail net.
Maybe look into Tailscale. At the end of the day, someone needs to open up the ports, but Tailscale does it strictly to negotiate a VPN connection between two devices, so they don’t see the traffic that goes over the tunnel.
- is there then a way to get it to a domain or do i need to install tailscale on every device?
  
  I do Tailscale on every device, but they also have a Funnel service that might work for you
- would there maybe be a way with npm to only open up port 80 and run everything through there?
  
  I think you should understand that if you are opening ports to the wide internet, you are putting yourself and anyone else on your network at risk. You’re playing with fire here.
  
  I have this setup with Tailscale so that I can watch plex from anywhere, without exposing ports to devices that I don’t trust and I can help you if you want. But don’t expose 80 to the internet.
Have you thought about using DuckDNS.org?

I run mine through them (it’s free) because I couldn’t work through using my own hosting since my host makes things super complicated.
- well from my little knolage about them you need to use their domain right?
  
  Yeah you create the subdomain and use their domain. It’s a free DNS service that prevents you from having to buy your own domain and host and setup all the DNS security yourself.
Just attempting to setup pihole + some DNS rules for this, but can't yet say it works cause I haven't gotten that far
- okay, send me a text when you got it working
Don't expose Jellyfin to the internet
- Do it with a reverse proxy and set 2FA before it (and break native app functionaility).
  
  Don't expose it to the internet
- Jellyfin specifically or just anything in general?
  
  Really anything in general. The only thing I have exposed is Nextcloud and a personal website. I spend a lot of time locking those down.

You've viewed 28 comments.