2024-12-01, 01:44 AM
DuckDNS does not hide your IP. It just provides a single URL, plus an update application, to handle IP address changes for residential Internet connections. Most residential service does not give you a 100% static IP address and DuckDNS aids in handling that periodic IP address change.
Forget about Docker. That does not come into play for this situation.
Caddy is a HTTP server and reverse proxy. The purpose of a reverse proxy is to sit in between the client and the server program and handle https connections in a more secure manner. Jellyfin is not a hardened application and there are attacks on the HTTPS handshake process that can weaken the resulting encryption.
Caddy IS a hardened program and is not vulnerable to known HTTPS handshake attacks. Caddy also has a lot of automation built in for managing and requesting certificates that are used in HTTPS.
Forget about Docker. That does not come into play for this situation.
Caddy is a HTTP server and reverse proxy. The purpose of a reverse proxy is to sit in between the client and the server program and handle https connections in a more secure manner. Jellyfin is not a hardened application and there are attacks on the HTTPS handshake process that can weaken the resulting encryption.
Caddy IS a hardened program and is not vulnerable to known HTTPS handshake attacks. Caddy also has a lot of automation built in for managing and requesting certificates that are used in HTTPS.