this post was submitted on 20 Oct 2023
1 points (100.0% liked)
Self-Hosted Main
502 readers
1 users here now
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
For Example
- Service: Dropbox - Alternative: Nextcloud
- Service: Google Reader - Alternative: Tiny Tiny RSS
- Service: Blogger - Alternative: WordPress
We welcome posts that include suggestions for good self-hosted alternatives to popular online services, how they are better, or how they give back control of your data. Also include hints and tips for less technical readers.
Useful Lists
- Awesome-Selfhosted List of Software
- Awesome-Sysadmin List of Software
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
I would suggest to put it behind an sso service like a self hosted authelia or authentik. So even if someone finds your website they will only see your authentication page and not what’s behind it.
How would that work with a Jellyfin client running on a device like a Chromecast dongle? The code on the dongle doesn't (IMHO) know how to log into an SSO service.
You would have to exclude the */api/ path in the authentik provide settings, so that if something wants to call the jellyfin api (like Swiftfin) it can go around the sso. It’s not the best practice for security but the only working way I have found.
Why would that be a benefit? Jellyfin already provides a login screen (allegedly with strong passwords)
Like I said. So even if someone find your domain to your jellyfin server they would only see Authentik.
And if you start with authentik you could use it for much more self hosted services so you have one big login page in front of your services.
Ooh, I like the sound of that.
I really gotta find a straight forward install guide for Authelia.
Cloudfare offers an authentication service like that already. Really easy to set up in front of a tunnel