[Solved] Android App not connecting outside

[Gilles990]

Hi all,
I'm using Jellyfin 10.9.7 on Synology with a reverse proxy and a let's encrypt certificat.
Android mobile app is 2.6.2
Android TV is 0,17

In Lan evrything is fine

Outside with any browser (Firefox, edge etc..)      https://Mydummyadress.myds.me:8920, it's working fine, so route is definitly opened

Outside with android Apps (Mobile or TV), I can't connect. (impossible to connect to https://Mydummyadress.myds.me:8920 )

If I try once, to connect with wifi (same lan as server), App Android works fine and will work also outside of my house.


So App should have gathered information in Lan mode that is not accessible in Wan mode. Once in the cache it's fine.
This work around is possible with a phone not with a TV ;-)

[TheDreadPirate]

When you're on your LAN, I am assuming you are still using your domain address, correct?

Also, why are you using both HTTPS with your reverse proxy AND HTTPS in Jellyfin? HTTPS between the proxy and jellyfin is unnecessary if they are on the same host or same LAN.

Also, do you know which Let's Encrypt algorithm your certs are using? RSA or ECDSA?

[Gilles990]

Yes I'm using the same adress.

The proxy is https -> http.

Jellyfin server, in the lan, is also accessible in http ip:8096 or with https with the normal dns name.

The problem is just with android app outside of my lan.

[TheDreadPirate]

What model phone and what version of android is it running.

I also need to know the answer to this question.

Also, do you know which Let's Encrypt algorithm your certs are using?  RSA or ECDSA?

[Gilles990]

Phones that don't work outside, are Samsung A55, A54, S23, android 14.
TV Philips Android Tv 8 et 11.

Let's encrypt algorithm is RSA/ECC.

[TheDreadPirate]

Do you know which reverse proxy synology uses and whether you're able to see the actual config file that it uses?

[Gilles990]

As the reverse proxy is integrated in Synology, I don't know what package is implmemented.

OUtside                        Lan
hhtps 8921 -> Poxy revere -> http 8920

[TheDreadPirate]

Instead of using port 8920, just use the standard https port 443. The proxy handles switching that to port 8096 when talking to the jellyfin server. This way you don't have to add ":8920" in the address.

Also, can you share the docker config for your jellyfin server?

[Gilles990]

I use the synology package 10.9.7, I already have try with the standard port and a sub domain. It's the same.

So i installed on docker (to try), same thing. No connection outside with the application but working with a browser.

{
"CapAdd" : [],
"CapDrop" : [],
"cmd" : "",
"cpu_priority" : 50,
"enable_publish_all_ports" : false,
"enable_restart_policy" : false,
"enabled" : true,
"env_variables" : [
{
"key" : "PATH",
"value" : "/usr/local/sbinusr/local/binusr/sbinusr/binsbinbin"
},
{
"key" : "HEALTHCHECK_URL",
"value" : "http://localhost:8096/health"
},
{
"key" : "DEBIAN_FRONTEND",
"value" : "noninteractive"
},
{
"key" : "LC_ALL",
"value" : "en_US.UTF-8"
},
{
"key" : "LANG",
"value" : "en_US.UTF-8"
},
{
"key" : "LANGUAGE",
"value" : "en_US:en"
},
{
"key" : "JELLYFIN_DATA_DIR",
"value" : "/config"
},
{
"key" : "JELLYFIN_CACHE_DIR",
"value" : "/cache"
},
{
"key" : "JELLYFIN_CONFIG_DIR",
"value" : "/config/config"
},
{
"key" : "JELLYFIN_LOG_DIR",
"value" : "/config/log"
},
{
"key" : "JELLYFIN_WEB_DIR",
"value" : "/jellyfin/jellyfin-web"
},
{
"key" : "JELLYFIN_FFMPEG",
"value" : "/usr/lib/jellyfin-ffmpeg/ffmpeg"
},
{
"key" : "XDG_CACHE_HOME",
"value" : "/cache"
},
{
"key" : "MALLOC_TRIM_THRESHOLD_",
"value" : "131072"
},
{
"key" : "NVIDIA_VISIBLE_DEVICES",
"value" : "all"
},
{
"key" : "NVIDIA_DRIVER_CAPABILITIES",
"value" : "compute,video,utility"
}
],
"exporting" : false,
"id" : "b2ccff4baf8dcba15d1acb667d11c4162c3fd7099d0eeefa1ee33245937fc0e9",
"image" : "jellyfin/jellyfin:latest",
"is_ddsm" : false,
"is_package" : false,
"labels" : {
"org.opencontainers.image.description" : "The Free Software Media System",
"org.opencontainers.image.documentation" : "https://jellyfin.org/docs/",
"org.opencontainers.image.source" : "https://github.com/jellyfin/jellyfin",
"org.opencontainers.image.title" : "Jellyfin",
"org.opencontainers.image.url" : "https://jellyfin.org",
"org.opencontainers.image.version" : "10.9.10"
},
"links" : [],
"memory_limit" : 0,
"name" : "jellyfin_docker",
"network" : [
{
"driver" : "bridge",
"name" : "bridge"
}
],
"network_mode" : "bridge",
"port_bindings" : [
{
"container_port" : 8096,
"host_port" : 8096,
"type" : "tcp"
}
],
"privileged" : false,
"shortcut" : {
"enable_shortcut" : false,
"enable_status_page" : false,
"enable_web_page" : false,
"web_page_url" : ""
},
"use_host_network" : false,
"version" : 2,
"volume_bindings" : [
{
"host_volume_file" : "/video",
"is_directory" : true,
"mount_point" : "/media",
"type" : "rw"
}
]
}

[TheDreadPirate]

Can you share the contents of /config/config/network.xml from the jellyfin config folder?