redirect to https on mobile app

[robertkwild]

hi all,

new to jellyfin here and so far so good, i followed this guide to make it https

https://jellyfin.org/docs/general/quick-start/windows/

just missed the duckdns part as i have a dynu account with opnsense plugin and for the task scheduler i just made a simple bat and ps1 script

in "shell:startup" i have a bat file

powershell -File "C:\Program Files\caddy\jellyfin.ps1"

and my ps1 file is

cd 'C:\Program Files\caddy\'
start-process -windowstyle hidden caddy run

on a wan pc to access my jellyfin server if i type in

my.domain.com/jellyfin

it redirects me to

https://my.domain.com/jellyfin

but on the mobile app it doesnt redirect me as if i look at my server in settings it says http?

thanks,
rob

[TheDreadPirate]

Jellyfin will be configured for http since Caddy is handling https. Did you set the bareurl setting in Jellyfin? What does your caddyfile look like?

[robertkwild]

hi,

my caddyfile looks like this

my.domain.com

redir /jellyfin /jellyfin/
reverse_proxy /jellyfin/* 127.0.0.1:8096

as in my jellyfin server i have put in /jellyfin in my baseurl

so the reason its not redirecting is it because it cant redirect from http to https on the mobile app but it can on the web as caddy is redirecting it?

[TheDreadPirate]

I don't recall if the app can handle redirects like that.

Does the app connect when you type out the entire address, including the protocol and the full sub-path?

[robertkwild]

well it looks like the app cant handle redirects, redirects only work on web using caddy as that handles it instead

and the app connects only using the sub path, you having to put in https otherwise it will connect you via http

you think its possible for the app to handle redirects?

[TheDreadPirate]

Which OS is your phone running? iOS or Android?

[robertkwild]

im running ios

[TheDreadPirate]

I got clarification from the devs. Redirects are potentially malicious so we explicitly do not follow redirects in our apps for both iOS and Android.

[robertkwild]

thanks for confirming, much appreciated

then if thats the case my NAT allows port 80 (http) and 443 (https)

obviously caddy needs both ports open, port 80 for letsencrypt renewel and 443 for web browsing

is there anyway to make port 80 to not show a page ie jellyfin and have it just for renewal

[TheDreadPirate]

If you are using Caddy, you do NOT need port 80 open as it can do TLS-ALPN challenges and is the default challenge type.

https://caddyserver.com/docs/automatic-h...-challenge

Close port 80. Solves both problems.