DefederateLemmyMl

  • Gen𝕏
  • Engineer ⚙
  • Techie 💻
  • Linux user 🐧
  • Ukraine supporter 🇺🇦
  • Pro science 💉
  • Dutch speaker
  • 0 Posts
  • 10 Comments
Joined 2 years ago
cake
Cake day: August 8th, 2023

help-circle


  • What I used to do was: I put jellyfin behind an nginx reverse proxy, on a separate vhost (so on a unique domain). Then I added basic authentication (a htpasswd file) with an unguessable password on the whole domain. Then I added geoip firewall rules so that port 443 was only reachable from the country I was in. I live in small country, so this significantly limits exposure.

    Downside of this approach: basic auth is annoying. The jellyfin client doesn’t like it … so I had to use a browser to stream.

    Nowadays, I put all my services behind a wireguard VPN and I expose nothing else. Only issue I’ve had is when I was on vacation in a bnb and they used the same IP range as my home network :-|







    1. Russia doesn’t need to make it into Germany to make it a disaster for all of Europe.

    2. Sure, NATO as a whole is bigger than Russia, but the troops and equipment are mostly not at the eastern border where the fighting would take place. We certainly don’t have anything near the size of the Ukrainian army stationed in the Baltics. Take the US out of the equation, because let’s be honest: under Trump they’re not going to stand up for Europe, and the military balance suddenly looks a lot less favorable. I’m not so sure the European NATO states could mount an effective and timely response to an incursion into the Baltic states, or into Poland around the Suwalki gap.