600MB. Would that require changes to Jellyfin? They're on the path to introducing Postgres support.
- Posts
- 44
- Comments
- 1205
- Joined
- 3 yr. ago
- Posts
- 44
- Comments
- 1205
- Joined
- 3 yr. ago
Linux @lemmy.ml NVIDIA driver 570.181 released for Linux as the latest recommended stable driver
Selfhosted @lemmy.world PSA: If the first Smart Search in Immich takes a while
Technology @lemmy.world Founder of 23andMe buys back company out of bankruptcy auction
Selfhosted @lemmy.world Friendly reminder that Tailscale is VC-funded and driving towards IPO
Selfhosted @lemmy.world Using DNS4EU in North America
politics @lemmy.world Poll: Democratic voters prefer "populism" over "abundance"
Technology @lemmy.world Google is Using AI to Censor Independent Websites
Not The Onion @lemmy.world Trump says he is naming Fox News host and former judge Jeanine Pirro as top federal prosecutor in DC
Technology @lemmy.world Mark Zuckerberg Thinks You Don't Have Enough Friends and His Chatbots Are the Answer
Meshtastic @mander.xyz MeshPocket Qi2 Magnetic Charging Power Bank, Meshtastic Compatible
Meshtastic @mander.xyz Channels other than LongFast?
Technology @lemmy.world Get your new PebbleOS watch
Technology @lemmy.world Chromecast (2nd gen) and Audio cannot Cast in 'Untrusted' outage
Technology @lemmy.ml Chromecast (2nd gen) and Audio cannot Cast in 'Untrusted' outage
Technology @lemmy.world Pixelfed & Loops Kickstarter Campaign Just Launched
politics @lemmy.world Harris: "Not a thing" she'd have done differently than Biden
Technology @lemmy.world “Extreme” Broadcom-proposed price hike would up VMware costs 1,050%, AT&T says
Technology @lemmy.world "Would U.S. tech workers join a union?" survey average: 67% likely
politics @lemmy.world Sanders Poll Sends Clear Message to Harris: Pro-Worker Policies Are 'Also Good Politics' | Common Dreams
Selfhosted @lemmy.world Clean your physical connectors!











I came up with a funny strategy I use to lock it down a bit. What's exposed to the internet for me is Apache2 reverse proxy. The proxy is locked down to reject all connections EXCEPT for the ones coming from a special subdomain which is something like a 64-character long random string. This prevents pretty any unwanted connections. Obviously the special subdomain must remain as secret as a shared password among the Jellyfin users. It works for trusted users.
What I want ideally is an "authenticated firewall." OpenWrt rejecting all connections on the open port except for an allowlist of IPs. Then there must be a system where users can authenticate and their IP is added to the allowlist. I haven't found an off-the-shelf solution like this but I'll make it some day. Too bad I figured this random string subdomain trick cause it seems good enough for now. :D