Security - apache basic auth or other solution ?

[vincem]

Hi, 

I would like to make my jellyfin accessible for my family. I managed to do all the configuration with apache2, ssl, on debian trixie, it works well.
But i've tried to add a basic auth on top of the jellyfin auth, and it seems to break everything.

It's not possible to have both auth ? 

I'm a little paranoid, and would love to have a first login before the jellyfin one, to hide completly the jellyfin service..

If i can't use basic auth, is there another solution to have this kind of double security ?

Is there away to make fail2ban works with jellyfin failed login attempts ? A log file for this ? A rule ?

thanks.