Weird Jellyfin/Streamyfin/Swiftfin + Reverse Proxy + Cloudflare Problem

[nothingveryobvious]

Hi all, I'm having a weird problem with Jellyfin clients on my iPhone. For my server, I use it with SWAG reverse proxy and Cloudflare DDNS. Cloudflare is set to use DNS only, no proxy. The following apps are all on my iPhone, accessing my Jellyfin server at https://jellyfin.mydomain.com

Jellyfin:
- WiFi at Home: Can populate libraries and play content
- WiFi Somewhere Else: Can populate libraries and play content
- Cell Data: Can populate libraries and play content

Streamyfin & Swiftfin:
- WiFi at Home: Can populate libraries and play content
- WiFi Somewhere Else: Can only populate libraries; cannot play content
- Cell Data: Can only populate libraries; cannot play content

Does anyone know what’s going on here? I can’t wrap my head around it. Is the Jellyfin app doing something differently? I’d greatly appreciate any advice. Thank you!

[TheDreadPirate]

Can you replicate the problem then share your full Jellyfin log via privatebin?

And can you share your SWAG config? Censor the domain name.

[nothingveryobvious]

Hi @TheDreadPirate thanks for replying.

Here's the Jellyfin log. At the very end, I had my phone use cell data to access the server on Streamyfin. The libraries populated, but I can't stream anything. https://p.darklab.sh/?7cb67134bd0cd2b0#5...CBLmvrxfdJ

Here's my SWAG config. SWAG is in Docker, but Jellyfin is the MacOS app, which is why the "proxy_pass" part directly references the address of Jellyfin.


## Version 2023/05/31
# make sure that your jellyfin container is named jellyfin
# make sure that your dns has a cname set for jellyfin
# if jellyfin is running in bridge mode and the container is named "jellyfin", the below config should work as is
# if not, replace the line "set $upstream_app jellyfin;" with "set $upstream_app <containername>;"
# or "set $upstream_app <HOSTIP>;" for host mode, HOSTIP being the IP address of jellyfin
# in jellyfin settings, under "Advanced/Networking" add subdomain.mydomain.tld as a known proxy

server {
listen 443 ssl;
listen [::]:443 ssl;

server_name jellyfin.*;

include /config/nginx/ssl.conf;

client_max_body_size 0;

location / {
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app jellyfin;
set $upstream_port 8096;
set $upstream_proto http;
proxy_pass http://10.0.0.94:8096;

proxy_set_header Range $http_range;
proxy_set_header If-Range $http_if_range;
}

location ~ (/jellyfin)?/socket {
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app jellyfin;
set $upstream_port 8096;
set $upstream_proto http;
proxy_pass http://10.0.0.94:8096;

}
}


[TheDreadPirate]

Can you run this command in a terminal window?

Code:

curl -vvv https://jellyfin.domain.td

Obviously replace the url with your domain. Does it say whether you are using HTTP2 or HTTP1.1? If it is HTTP2, can you check if ssl.conf, proxy.conf, or resolver.conf include a parameter to downgrade the connection to HTTP1.1? /socket needs to be HTTP1.1.