SOLVED: Bitrate limit not enforced when using Nginx Proxy Manager

[sthtyekujetyk]

I am running a docker instance that contains jellyfin and Nginx Proxy Manager, the latter port fowarded to WAN

I have set up a proxy to google for / (I don't want anything on the root of the site) and a proxy_pass for jellyfin in the advanced tab, like this:

 

Code:

location ^~  /jellyfin {
    proxy_pass http://192.168.1.201:8096; #My jellyfin instance
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection $http_connection;
    proxy_set_header Host $host;
    proxy_cache_bypass $http_upgrade;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header X-Forwarded-Host $http_host;
    proxy_pass_request_headers on;
    proxy_buffering off;
}

In Dashboard --> Networking
    I have selected /jellyfin as Base url
    I have set my FQDN DDNS "mysite.ddns.net" as a known proxy

The bitrate limit is never enforced, what am I missing here?
Thanks in advance

[TheDreadPirate]

What version of Jellyfin and which docker image? The official jellyfin/jellyfin image?

[sthtyekujetyk]

Version: 10.8.13

Operating System: Linux

Architecture: X64

lscr.io/linuxserver/jellyfin:latest

Edit:
Do you guys enforce a no support for unofficial image policy? If so I apologize, i can try the official one

[TheDreadPirate]

FWIW, the reverse proxy has no affect on whether the bit rate is honored or not.

Can you share with me examples of Jellyfin not honoring the max bit rate? Either screenshots or logs. Both?

[sthtyekujetyk]

It was my understanding that the bitrate limit would get enforced only when you access your jellyfin instance over WAN. Doesn't it?

My assumption was that somehow jellyfin didn't understand that it is being called from WAN because a LAN reverse proxy is calling it.
I also can login using my admin account despite the fact i disable remote connections for that user

   

   

   

Transcoding log

[TheDreadPirate]

The reverse proxy passes the requestor's IP.

Code:

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

You can check in your jellyfin log by looking for this line.  "IsInLocalNetwork".

Code:

[INF] RemoteClientBitrateLimit: 40000000, RemoteIp: "<Client IP goes here>", IsInLocalNetwork: False

Since you are not allowing remote connections, can I assume you are using a VPN?

What subnets do you have in Dashboard > Networking > LAN Networks?

   

[sthtyekujetyk]

Setting the client IP from the log you mentioned as a known proxy fixed my issue
I got my bitrate limit enforced and also got my admin account not available from WAN (as wanted and expected)

No VPN was involved here
Thank you very much for the support

[flame]

EDIT: Created a new thread rather than continuing here.