Reverse Proxy

[TheDreadPirate]

There have been, in the past, attacks on the handshake process weaken the resulting encryption. There are also several TLS ciphers that are weak that Jellyfin still offers to clients. Jellyfin has no way to turn those off or protect against some TLS attacks (read the wiki link below). But Apache/Nginx/Caddy do.

https://en.wikipedia.org/wiki/Transport_...y#Security

I also wrote a short guide to further enhance Apache and Nginx based on industry best practices.

https://forum.jellyfin.org/t-apache-ngin...ls-ciphers