Yep, at least for their own internal mistake. I rebooted them a few times in that time because updates and important config updates. Even for power outages (2 iirc) they are resilient, they are set to automatic boot up when the power is back.
If they don't have a team, they don't regularly look, if they dont look, they don't report, if they don't report your analysis maybe biased because you can only check about what you know....
Well, when I was talking about not techie people I didn't mean technology analphabets, everybody can open a port in your consumer router with the help of chatgpt, not everybodies is able to realizes they need a reverse proxy with tls and modify the headers for the Auth....
Being secure in internet is like the herd inmunity for corona times, your system could be fairly secure, but if you are hammered with several bot nets it is going to be a challenge, and there is responsabiity is shipping a product that is easy to be infected.
And your third paragraph really confirms why this post is necessary
Jellyfinn has a nice record of problems during the authentication and escalating privileges, even the developer team recommends to use it behind a vpn and don't expose it to internet.
If course, you can use a reverse proxy with and external Auth framework to mitigate it, pair it with fail2ban, geo restrictions and a second factor, but those things are not in the scope of the regular user.
Let's face reality, plex is not such widespread for being the default option in kali Linux....
Sometimes your data is not important but your computer, nobody wants to be in a netbot.
Well, perhaps plex is not better in security (we don't know for sure) but at least they have a cyber team, a monitoring system and in every bodies hope, dedicated developers for these topics.
Jellyfinn dies not hve a team like this one per se. Could the developers be better fit and knowledged in jellyfinn than plex? Perhaps, but probably the focus is in the features and not in the security
But they are responsible for the unsecured / gruyere cheese product they ship.
Jellyfinn has a lot of holes and it is easy to deploy it in a insecure way by not techie people. Last time I checked they even didn't have a recommended practices for hardening it
Good to read you know how to implement some protection layers around your jellyfinn :)
But most of the people (specially the plex ones) don't have the technical background to deploy something like you have, and convince those people to do the switch without knowing how to protect themselves is not a wise thing to do. Specially when this time, plex response was perfectly fine :)
Mr Pratchett is genuinely a writer in a million, he is the only person when I knew he had his mental problems (was dementia?) I really felt terrible for him and for knowing that his legacy was going to stop...
Enjoy his books and if you accept a tip, don't skip any book, even the non discworld ones
No one, absolutely no one was able to master so many different styles, from theologist essays (smaller gods) to thriller novel (all the guards trilogy) . And in all of them you can find many quotes that could be at the same level as some of the best philosophers in the old continent.
His novel defended the igualitary access to almost everything (equal rites, witches) , decompose social classes (almost in every book) ,speaks about slavism (the golem set of books) and how the things interact to each other in order to create the society we know. And more important, it also show how difficult is to change it.
I addition you could find great explanation of the most important secrets of the universe, and last but not least, in some books he show an exquisite sense of humor.
I understand that his style is not for everybody, and first time it could even generate a rejection. But which genius of its area didn't create such feeling??
It is time to start recognizing him as the genius and master he is.
I don't have time now so I will sketch the solution
You need a proxy server in your vps that will redirect the traffic to your home. Caddy is usually recommended here and I am planning to migrate to it (current is nginx)
For your dns you need something is called zone name resolution, it will resolve different ip depending where the request came from
Yep, at least for their own internal mistake. I rebooted them a few times in that time because updates and important config updates. Even for power outages (2 iirc) they are resilient, they are set to automatic boot up when the power is back.