Do I need to configurations to protect jellyfin if I just want to run it locally?

[NerdNerd]

Hopefully this doesn't come off as a dumb question or anything, but been wanting to setup a jellyfin for use at home and reading up on all this port forward and it being unsafe. Is it possible to run a local jellyfin on a network without exposing it to the Internet making it vulnerable to attacks? I don't really need use for it outside the home network anyways.

[TheDreadPirate]

Port forwarding is only necessary if you want to access your Jellyfin server outside of your home. Jellyfin can run locally without it.

[NerdNerd]

Port forwarding is only necessary if you want to access your Jellyfin server outside of your home.  Jellyfin can run locally without it.

So if I set-up a Ubuntu server computer install jellyfin with default settings everything should be fine? I don't need any fancy proxy stuff or firewall management to keep it from being exposed?

[TheDreadPirate]

You only need to open port 8096 in Ubuntu to allow for local access. You don't need to change anything in your router. Routers, by default, block all unsolicited requests unless you port forward.

[NerdNerd]

You only need to open port 8096 in Ubuntu to allow for local access.  You don't need to change anything in your router.  Routers, by default, block all unsolicited requests unless you port forward.

So just just install Ubuntu-server and jellyfin and everything is good to go?

[TheDreadPirate]

I can't remember if Ubuntu enables UFW on a fresh install. But you will probably need to open port 8096 on Ubuntu's firewall, which will allow local clients to access Jellyfin. This does not allow remote clients to connect.

sudo ufw allow 8096

[NerdNerd]

I can't remember if Ubuntu enables UFW on a fresh install.  But you will probably need to open port 8096 on Ubuntu's firewall, which will allow local clients to access Jellyfin.  This does not allow remote clients to connect.

sudo ufw allow 8096

Alright thanks I really wanna have a locally server to store my own movies in as a backup figured jellyfin would be nice to have as well. So as long as I don't open up any ports other than 8096 I should be fine? Anything else I should do just to be safe.

[TheDreadPirate]

No. Since it isn't publicly accessible, there are no additional steps needed to secure it.

[NerdNerd]

No.  Since it isn't publicly accessible, there are no additional steps needed to secure it.

Awesome thanks that's all I really wanted to know, I don't know much about servers, ports, and what keeps the local or not so I wanted to make sure it was safe to do before going in head first not knowing what I'm doing. Appreciate the help.