2023-10-03, 07:24 PM
Hi all,
I have a little annoying problem and I'm hoping someone can help me out.
I have a server on which Jellyfin is mounted and I wanted to make it accessible to the outside, so as a first step I configured a proxy with nginx, fail2ban, opened my ports and used Cloudflare to have some additional protection. Then as a second option I opted for tunnels instead, so I have the cloudflared daemon installed on the Jellyfin server and so I was able to close the doors, which were causing me some concern.
The problem with both ways is that it annoying to constantly change the hostname on my mobile devices based on whether I'm home or not.
Jellyfin seems to have a feature to understand if the accessed IP is local, but it doesn't work like Plex, and in my case it never sees me at home, because I go through Cloudflare and the IP it receives is its own. I found a way to get the "real" IP but it's still the public one.
And I can't add the public domain into my DNS and point it to the local IP, because it gives me error with missing certificate, and it's not possible to get the one Cloudflare uses outward.
I already know that I could solve it by removing Cloudflare from the equation (and maybe using Let's Encrypt), but not being an expert in security I would prefer to keep Cloudflare which makes me feel a little more secure.
Does anyone know how I could solve this problem?
I have a little annoying problem and I'm hoping someone can help me out.
I have a server on which Jellyfin is mounted and I wanted to make it accessible to the outside, so as a first step I configured a proxy with nginx, fail2ban, opened my ports and used Cloudflare to have some additional protection. Then as a second option I opted for tunnels instead, so I have the cloudflared daemon installed on the Jellyfin server and so I was able to close the doors, which were causing me some concern.
The problem with both ways is that it annoying to constantly change the hostname on my mobile devices based on whether I'm home or not.
Jellyfin seems to have a feature to understand if the accessed IP is local, but it doesn't work like Plex, and in my case it never sees me at home, because I go through Cloudflare and the IP it receives is its own. I found a way to get the "real" IP but it's still the public one.
And I can't add the public domain into my DNS and point it to the local IP, because it gives me error with missing certificate, and it's not possible to get the one Cloudflare uses outward.
I already know that I could solve it by removing Cloudflare from the equation (and maybe using Let's Encrypt), but not being an expert in security I would prefer to keep Cloudflare which makes me feel a little more secure.
Does anyone know how I could solve this problem?