nublug

oh dang, i thought i saw docs and comments saying ddns would help behind a cgnat too, must be mistaken. it’s just for isps who give semi-static ips that change, not full cgnat. after some quick googling it looks like tailscale or other vpn or cloudflare tunnel are your only options.

EDIT: ddns does not work behind cgnat, only vpns and cloudflare tunnels do. my bad.

cgnat is doable with a dynamic dns service. you sign up free at duckdns, freedns, or desec, set up the subdomain you want (example.dedyn.io), install or host in a container a small ddns tool that will periodically (5 min typically) check what your current ip is and update your dns record with that dns service automatically with an api. some routers even have a dynamic dns setting so you can do it without a separate install.

as far as security, you’ll at a minimum want a long, unique password for any jellyfin accounts, and you should place it behind a reverse proxy like nginx, nginx proxy manager for a gui, caddy, or traeffik for some docker automagic fuckery i still don’t understand. i use nginx proxy manager, set up a wildcard *.example.dedyn.io certificate and force ssl on each service i’m forwarding.

you can get fanicer and have an authentication layer self hosted as well like authelia or authentik, but beware that apparently mobile apps and smart tv apps for jellyfin do not play nice because they use the same http port as web access and do not have the ability to pop open a web portal for a secondary auth and will not work with these yet. so it’s a good extra layer and 2fa sso addition but only if you use the webgui jellyfin and don’t rely on an app, which considering you’re asking about casting is probably not your use case.

what else you can do is set up a crowdsec or fail2ban service that will read logs from either the reverse proxy or jellyfin itself and ban ips thru your host firewall that fail to log in to help prevent bots from brute forcing in.

it’s not perfect but with a reverse proxy, ip banning tool, and strong, long passwords on jellyfin it should be relatively ok.

however it would probably be most secure to setup an openvpn or tailscale to vpn to your host and have a definitely secure link to jellyfin from everywhere. i don’t use these myself so i don’t know about limitations this way such as mobile app or smart tv app compatibility, though. and if you want to share with other users it comes with its own security considerations of letting others have a vpn into your host.

hope some of this helps, also there’s a cloudflare tunnel thing you can use instead of those dynamic dns services for domain redirect to ip behind cgnat, but i haven’t used it either and don’t know what all it entails.

good luck!

this is the second or third article i’ve seen where someone supposedly fixes dumb ai things by checks notes using ai to do it.

this is an ad.

i have lived most of my life playing as a kid and working as an adult outside, outside right now, even. i have to take supplements. you don’t actually get much vit d from sunlight, the vast majority comes from your diet and some people like me need more from supplements no matter what you eat. and yes the supplements (10k to 15k iu a day for a few months) got my levels up.

apparently it takes a while (weeks to months) for the level in your system to build up and takes a while for it to deplete so once my blood test numbers got back to normal i stopped and now i just take that amount a day for a few weeks a couple times a year when i notice i’ve been sluggish and more moody lately. and yes this was all prescribed and explained by my doctor a few years ago. the ld50 (lethal dose for 50% of pop) is 50k iu a day for over 6 months, and you get kidney stones as warning signs long before then, so as long as you stay below like 20k to 25k a day and don’t do it for long term, it’s pretty safe to take a higher doses like that.

also regarding your lower comment saying none work for you, you might have just not been taking a high enough dose like me. at first doc prescibed 5k iu daily but 3 months later my levels were still too low so they explained all that above. also some brands do seem to be garbage. i don’t wanna say a brand but of the ones i’ve tried any dissolvable white compressed powder ones are garbage and taste awful and the gel cap style ones work and don’t taste like anything. you might also should look up specific foods with higher vit d content and eat more of those, but i tried that in those first 3 months with the supplements and it didn’t seem to make much of a difference.