Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse

NodeBB

  1. Home
  2. Selfhosted
  3. goodbye plex

goodbye plex

Scheduled Pinned Locked Moved Selfhosted
178 Posts 102 Posters 0 Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • M [email protected]

    I've heard jellyfin has a lot of security issues, which I don't know if that's accurate or not. But the BIGGEST issue is lack of a proper tvOS app. I really don't feel like using Infuse or some other app just to use my library. Year after year I hear about people switching and yet, the gap is simply still there.

    C This user is from outside of this forum
    C This user is from outside of this forum
    [email protected]
    wrote last edited by
    #83

    To be fair there is a tvOS app in development but progress is slow because the whole project is maintained by a small handful of volunteers. They’ve put out a call for help and the maintainers post updates here

    1 Reply Last reply
    8
    • D [email protected]

      I've been using jellyfin for years.

      My best recommendation is DELAY UPDATES and back up before you update.

      I have a history of updates breaking everything so you should be careful about them.

      All software recommends backing up before an update, but for jellyfin the shit is real, you really want to back up.

      L This user is from outside of this forum
      L This user is from outside of this forum
      [email protected]
      wrote last edited by [email protected]
      #84

      I've been using jelly since just after the emby fork and never had an update issue on docker. Automatic snapshots every 5 mins (amoung other backup tools). means I don't need to worry much if it does.

      1 Reply Last reply
      16
      • D [email protected]

        This is probably the wrong post to ask this question, so sorry in advance.

        I have a dual boot Linux + Windows. Jellyfin runs wonderfully on muy Linux partition with docker-compose. Anybody knows how can I clone it in my Windows partition, such that configs, metada and accounts remain the same? I've failed to do this, and only the media volume remaines identical on both OS.

        R This user is from outside of this forum
        R This user is from outside of this forum
        [email protected]
        wrote last edited by
        #85

        This may not be the answer you are looking for, but one method would be to use WSL on windows to run a Linux distro with Docker installed and just migrate everything over, basically 1-to-1. Then set WSL to auto start when you boot up windows. If you install Docker Desktop on Windows, it will also pick up that you're using Docket via WSL and allow you to manage shit from the client. I don't do that though, I'm a masochist old-school.

        1 Reply Last reply
        1
        • R [email protected]

          I’ve heard jellyfin has a lot of security issues

          The biggest known stuff I saw on their GitHub is that a number of the exposed service URLs under the hood don't require auth. So, it's open-source with known requirements, you can tell easily from the outside that it's running, and you can cause it to activate a LOT of packages without logging in. That's a zero-day in any package that can be passed a payload away from disaster.

          AS far as TVOS, I'm kinda surprised swiftfin doesn't service you.

          L This user is from outside of this forum
          L This user is from outside of this forum
          [email protected]
          wrote last edited by
          #86

          Assuming this is all true, sure its not great but how much does it matter?

          Most have jellyfin in a docker. My jellyfin can't only has read only accses to the media folder. Only the config folder has write access. Assuming the worst case scenario here, how much damage can than do?

          R 1 Reply Last reply
          5
          • D [email protected]

            I've been using jellyfin for years.

            My best recommendation is DELAY UPDATES and back up before you update.

            I have a history of updates breaking everything so you should be careful about them.

            All software recommends backing up before an update, but for jellyfin the shit is real, you really want to back up.

            S This user is from outside of this forum
            S This user is from outside of this forum
            [email protected]
            wrote last edited by
            #87

            laughs in immich

            M 1 Reply Last reply
            37
            • C [email protected]

              What is authentik and could I use it on podman with compose?

              L This user is from outside of this forum
              L This user is from outside of this forum
              [email protected]
              wrote last edited by
              #88

              The best and most versatile system is having domains and a reverse proxy that has internal and external domains. Ie jelly.example.com and Vaultwarden.internal.example.com

              Then you add authentik which does SSO for many app like nextcloud, immich, linkwarden etc. For apps that don't integrate, you can still use his with reverse proxy authentication (sonarr).

              Naturally this is more complex to setup but nothing beats the versatility.

              I can choose extra protection for things like vaultwarden (need to connect via wiregaurd). Make things external for other users to access easily (immich, jellyfin, etc). Everything is based on users that are made in authenticatik and they all have the same password with single sign on.

              You would approach this is pieces. get the domain and reverse proxy working first. Then authentik. this is only realistic with docker compose.

              1 Reply Last reply
              2
              • D [email protected]

                This is probably the wrong post to ask this question, so sorry in advance.

                I have a dual boot Linux + Windows. Jellyfin runs wonderfully on muy Linux partition with docker-compose. Anybody knows how can I clone it in my Windows partition, such that configs, metada and accounts remain the same? I've failed to do this, and only the media volume remaines identical on both OS.

                J This user is from outside of this forum
                J This user is from outside of this forum
                [email protected]
                wrote last edited by
                #89

                Looks like there is a config and cache location in their docker scripts. The easiest way to make a docker application portable is to bind mount the config and cache. That way you have access to the actual files and could copy them to your windows partition.

                If you're already using a volume for that data, I think it becomes a bit trickier. I know technically you can move or copy volumes, but I've never tried. Although you could still bind mount a random directory and still copy the files out.

                1 Reply Last reply
                1
                • E [email protected]

                  I am also not up to date on Jellyfin security issues but the biggest one I care about is that its clients don’t support OIDC. There’s a neat plugin for OIDC, but without client support it only works with the web client and I’m not a fan of leaving login pages open to the internet.

                  F This user is from outside of this forum
                  F This user is from outside of this forum
                  [email protected]
                  wrote last edited by
                  #90

                  Use an LDAP to OIDC bridge?

                  1 Reply Last reply
                  0
                  • M [email protected]

                    I've heard jellyfin has a lot of security issues, which I don't know if that's accurate or not. But the BIGGEST issue is lack of a proper tvOS app. I really don't feel like using Infuse or some other app just to use my library. Year after year I hear about people switching and yet, the gap is simply still there.

                    F This user is from outside of this forum
                    F This user is from outside of this forum
                    [email protected]
                    wrote last edited by [email protected]
                    #91

                    I just validated that the latest version of the LDAP privilege escalation issue is not an issue anymore. The curl script is in the ticket.

                    This was the one where a standard user could get plugin credentials, such as the LDAP bind user, and change the LDAP endpoint. I.E., bad.

                    I chose this one because after going through all of them, it was the only one that allowed access to something that wasn't just data in Jellyfin.

                    So for me, security is less of an issue knowing that, as only family use the service, and the remaining issues all require a logged in user (hit admin endpoint with user token).

                    Plus, I tried a few of those and they were also fixed, just not documented yet. I didn't add to those tickets because I was not as formal with my testing.

                    @[email protected]

                    1 Reply Last reply
                    2
                    • M [email protected]

                      honestly every explanation probably just ends at 'this is what i learned on and it works'. same way i religiously use nano and try to do everything in bash first. or how a couple coworkers can't stop explaining their vim workflow and defending python unprompted like it's a trauma response for them. my current homelab is also running a r9 with 64gb ram and 30tb storage. if i were paying for remote hosting, still using salvaged hardware or being paid, i'd invest time learning newer processes. but containers haven't caught my interested and this set up takes basically no effort on my part to maintain, so i can focus my limited free time elsewhere.

                      dataprolet@lemmy.dbzer0.comD This user is from outside of this forum
                      dataprolet@lemmy.dbzer0.comD This user is from outside of this forum
                      [email protected]
                      wrote last edited by
                      #92

                      Same.
                      The time it takes me to write a single function in Python is the same as writing a whole Bash-script using nano.
                      Also I initially set up my homelab using Docker in a VM on Proxmox. Totally useless abstraction, but I never found the time and patience to migrate the VM to bare metal.

                      C 1 Reply Last reply
                      1
                      • M [email protected]

                        honestly every explanation probably just ends at 'this is what i learned on and it works'. same way i religiously use nano and try to do everything in bash first. or how a couple coworkers can't stop explaining their vim workflow and defending python unprompted like it's a trauma response for them. my current homelab is also running a r9 with 64gb ram and 30tb storage. if i were paying for remote hosting, still using salvaged hardware or being paid, i'd invest time learning newer processes. but containers haven't caught my interested and this set up takes basically no effort on my part to maintain, so i can focus my limited free time elsewhere.

                        M This user is from outside of this forum
                        M This user is from outside of this forum
                        [email protected]
                        wrote last edited by
                        #93

                        honestly every explanation probably just ends at 'this is what i learned on and it works'.

                        Yeah, lots of these answers basically boil down to “when all you have is a hammer, everything looks like a nail.”

                        T 1 Reply Last reply
                        10
                        • M [email protected]

                          I've heard jellyfin has a lot of security issues, which I don't know if that's accurate or not. But the BIGGEST issue is lack of a proper tvOS app. I really don't feel like using Infuse or some other app just to use my library. Year after year I hear about people switching and yet, the gap is simply still there.

                          M This user is from outside of this forum
                          M This user is from outside of this forum
                          [email protected]
                          wrote last edited by
                          #94

                          Yeah, Samsung TVs don’t have a native Jellyfin app either. You can sideload it, but good luck walking your “you touched my computer six months ago and now it’s broken. This is your fault” grandmother through that over the phone.

                          1 Reply Last reply
                          2
                          • D [email protected]

                            I've been using jellyfin for years.

                            My best recommendation is DELAY UPDATES and back up before you update.

                            I have a history of updates breaking everything so you should be careful about them.

                            All software recommends backing up before an update, but for jellyfin the shit is real, you really want to back up.

                            S This user is from outside of this forum
                            S This user is from outside of this forum
                            [email protected]
                            wrote last edited by
                            #95

                            Like the version or the media?

                            D W 2 Replies Last reply
                            1
                            • S [email protected]

                              Like the version or the media?

                              D This user is from outside of this forum
                              D This user is from outside of this forum
                              [email protected]
                              wrote last edited by
                              #96

                              I have it on docker with two volumes, ./config and ./cache

                              I back up those before each update.

                              A bad Jellyfin update should not mess with your media folder in anyway. Though you should have backups of those aswell as a rule of thumb.

                              B 1 Reply Last reply
                              5
                              • M [email protected]

                                Unrelated but why a full VM for Linux stuff, lxc is much more efficient

                                L This user is from outside of this forum
                                L This user is from outside of this forum
                                [email protected]
                                wrote last edited by
                                #97

                                Stronger compartmentalization

                                1 Reply Last reply
                                3
                                • S [email protected]

                                  Like the version or the media?

                                  W This user is from outside of this forum
                                  W This user is from outside of this forum
                                  [email protected]
                                  wrote last edited by
                                  #98

                                  the config and databases or the media, you mean?

                                  if so, the former, but I mount the meadia with a read only docker volume just to be sure, because chances are I would never notice it

                                  1 Reply Last reply
                                  1
                                  • M [email protected]

                                    after almost 15yrs my plex server is no more. jellyfin behind nginx with authentik is running very nicely.

                                    father_redbeard@lemmy.mlF This user is from outside of this forum
                                    father_redbeard@lemmy.mlF This user is from outside of this forum
                                    [email protected]
                                    wrote last edited by
                                    #99

                                    I want to leave too, but I really like PlexAmp for my music streaming. And no, Finamp doesn't work nearly as well or look as nice.

                                    F blitzen@lemmy.caB L 3 Replies Last reply
                                    8
                                    • M [email protected]

                                      after almost 15yrs my plex server is no more. jellyfin behind nginx with authentik is running very nicely.

                                      mlg@lemmy.worldM This user is from outside of this forum
                                      mlg@lemmy.worldM This user is from outside of this forum
                                      [email protected]
                                      wrote last edited by
                                      #100

                                      Does jellyfin do untranscoded video/audio?

                                      Haven't used it in years but finally building up my media server again and I remember it had some funky settings for hardware encoding back then which I didn't need because I was connecting to it via a repurposed gaming laptop that could easily handle 4k content and surround sound by itself.

                                      T 1 Reply Last reply
                                      9
                                      • A [email protected]

                                        Its monthly or lifetime and the lifetime is like 6-8 years of paying monthly.

                                        T This user is from outside of this forum
                                        T This user is from outside of this forum
                                        [email protected]
                                        wrote last edited by
                                        #101

                                        Ah I didn’t know that. I doubt it was that much when I first got it, but I’m unsure. I’ve had it for a long time

                                        1 Reply Last reply
                                        1
                                        • father_redbeard@lemmy.mlF [email protected]

                                          I want to leave too, but I really like PlexAmp for my music streaming. And no, Finamp doesn't work nearly as well or look as nice.

                                          F This user is from outside of this forum
                                          F This user is from outside of this forum
                                          [email protected]
                                          wrote last edited by
                                          #102

                                          What about subsonic or funkwhale? I think I also tried a third one I'm forgetting

                                          father_redbeard@lemmy.mlF 1 Reply Last reply
                                          5
                                          Reply
                                          • Reply as topic
                                          Log in to reply
                                          • Oldest to Newest
                                          • Newest to Oldest
                                          • Most Votes


                                          • Login

                                          • Login or register to search.
                                          Powered by NodeBB Contributors
                                          • First post
                                            Last post
                                          0
                                          • Categories
                                          • Recent
                                          • Tags
                                          • Popular
                                          • World
                                          • Users
                                          • Groups