local cloudflare alternative
from Oliper202020@lemmy.world to jellyfin@lemmy.ml on 01 May 2024 14:54
https://lemmy.world/post/14908729

hi is there any local cloudflare alternative becourse from my reading it seems that that using it for jellyfin is against cloudflares TOS and i would like to get jellyfin to my domain but i dont wanna pay for it, so a loxal alternative would probably be my best bet, i also would prefer not to open any ports

#jellyfin

threaded - newest

atomWood@lemm.ee on 01 May 2024 15:48 next collapse

If you don’t want to open any ports, then you will need to setup a VPN service. Tailscale is one of the easiest to use VPNs out there.

Sethayy@sh.itjust.works on 01 May 2024 16:10 next collapse

Just attempting to setup pihole + some DNS rules for this, but can’t yet say it works cause I haven’t gotten that far

Oliper202020@lemmy.world on 01 May 2024 17:21 collapse

okay, send me a text when you got it working

Starbuck@lemmy.world on 01 May 2024 15:51 next collapse

Maybe look into Tailscale. At the end of the day, someone needs to open up the ports, but Tailscale does it strictly to negotiate a VPN connection between two devices, so they don’t see the traffic that goes over the tunnel.

Oliper202020@lemmy.world on 01 May 2024 15:54 next collapse

is there then a way to get it to a domain or do i need to install tailscale on every device?

Starbuck@lemmy.world on 01 May 2024 15:59 collapse

I do Tailscale on every device, but they also have a Funnel service that might work for you

Oliper202020@lemmy.world on 01 May 2024 16:08 collapse

<img alt="" src="https://lemmy.world/pictrs/image/59faafbf-cba2-4839-8304-0be56df90c66.png"> does this mean i can connect it to my domain and can nginx then route traffic from other vms trough to other subdomains?

Oliper202020@lemmy.world on 01 May 2024 15:56 collapse

would there maybe be a way with npm to only open up port 80 and run everything through there?

Starbuck@lemmy.world on 01 May 2024 21:50 collapse

I think you should understand that if you are opening ports to the wide internet, you are putting yourself and anyone else on your network at risk. You’re playing with fire here.

I have this setup with Tailscale so that I can watch plex from anywhere, without exposing ports to devices that I don’t trust and I can help you if you want. But don’t expose 80 to the internet.

kaitco@lemmy.world on 01 May 2024 16:01 next collapse

Have you thought about using DuckDNS.org?

I run mine through them (it’s free) because I couldn’t work through using my own hosting since my host makes things super complicated.

Oliper202020@lemmy.world on 01 May 2024 16:09 collapse

well from my little knolage about them you need to use their domain right?

kaitco@lemmy.world on 01 May 2024 16:13 collapse

Yeah you create the subdomain and use their domain. It’s a free DNS service that prevents you from having to buy your own domain and host and setup all the DNS security yourself.

Oliper202020@lemmy.world on 01 May 2024 17:21 collapse

but i would like to have my own domain

kaitco@lemmy.world on 01 May 2024 17:51 collapse

I don’t think I understand your original question then.

If you want your jellyfin on your own domain like Oliper202020.com, that requires owning a domain which requires registration which incurs a cost.

If you don’t want to pay for something, just use a DNS service to redirect through their domain instead.

Oliper202020@lemmy.world on 01 May 2024 18:30 collapse

i want to spend money on the domain, i just dont want to pay money for a cloudflare alternative or one of the paid subscriptions

jonne@infosec.pub on 01 May 2024 20:46 collapse

You can use your own domain and set a CNAME to any of the DDNS ones. So eg. home.mydomain.com can be a CNAME for oliper.ddns.com.

possiblylinux127@lemmy.zip on 01 May 2024 17:15 next collapse

Don’t expose Jellyfin to the internet

Appoxo@lemmy.dbzer0.com on 01 May 2024 21:13 next collapse

Do it with a reverse proxy and set 2FA before it (and break native app functionaility).

possiblylinux127@lemmy.zip on 01 May 2024 22:15 collapse

Don’t expose it to the internet

Appoxo@lemmy.dbzer0.com on 02 May 2024 05:06 collapse

Set proper ACLs and you are probably fine.

yannic@lemmy.ca on 02 May 2024 03:12 collapse

Jellyfin specifically or just anything in general?

possiblylinux127@lemmy.zip on 02 May 2024 04:27 collapse

Really anything in general. The only thing I have exposed is Nextcloud and a personal website. I spend a lot of time locking those down.

Appoxo@lemmy.dbzer0.com on 01 May 2024 21:13 collapse

Don’t proxy jellyfin through CF.
Using it for the domain or subdomain is fine.

You know it’s not proxied because the cloud is gray instead of yellow.
And if you ping the domain it’s your own IP instead of a cloudflare ip.

Oliper202020@lemmy.world on 05 May 2024 21:49 collapse

ohhh, so i can do it through cloudflare without breaking TOS? or am i misunderstanding?

Appoxo@lemmy.dbzer0.com on 05 May 2024 22:00 collapse

Nope. It’s doable and permitted as long as the traffic is not proxied (gray cloud)

Oliper202020@lemmy.world on 06 May 2024 09:10 collapse

okay, im gonna look into it later