Thanks again, mate. So basically, if I’m exposing my junk to the world, and by junk I mean service(s), and by world I mean the open internet, I should do it using a reverse proxy and enable HTTPS, otherwise it’s not really very secure? Would that be a reasonable takeaway?
Yet again, thanks. Especially for pointing out the things you (may) be not so sure about. That’s admirable. 🫡
Okay cool, thanks for that follow-up and confirming my SHH setup seems reasonable. 🙏
There’s one thing I don’t really get though, with the whole reverse proxy thing and how that’s supposedly safer:
putting the resilient software (a good reverse proxy) infront of Jellyfin (or most other software) simply increases your security by having the more safe web server be the one interfacing with end users.
Like, once a user client has contact with the Jellyfin instance, via the reverse proxy, wouldn’t the Jellyfin instance be just as vulnerable as without the reverse proxy? Once a connection is established, or found to be available, you could just start exploiting away in the same way, right? Or wrong? If wrong, how? 😅 Maybe it’s too long for a text reply? Maybe I should watch some helpful video explaining how it works. 😁
Yes, even without this current news.
Yeah can’t have that
Could you explain a bit more?
Like, right now, I have two machines on my local network. Both are running sshd on port 22.
In my router, I’ve set the port forwarding to be some high port number in the 19000’s to forward to port 22 on the first machine, and then the same high port number incremented by one (1) to forward to port 22 on the second machine.
Also key based login only of course.
Is this insecure in some way?
Would a VPN make connecting to my computers more secure somehow? I’m not sure I understand how if so.
What I meant with the Jellyfin question was kind of, how is having it exposed via a reverse proxy different from exposing its port right away? Is it because the only allowed connection would be HTTPS/encrypted etc, maybe?
I’ve never set up a home network apart from physical cables and using routers and switches before, no advanced site/network configuring. Definitely interested to learn more though for when I want to serve a real media center using a NAS and like a Pi.
Understandable
This sounds like a blocker for me to not switch to Jellyfin… What else is in there that’s equally severe?
having your ssh port blocked in the firewall being second
So like if I want to access my PC from outside, is it enough that I don’t have a firewall installed but that I open up some random port and redirect it to my PC’s port 22, and then connect to it via the random port?
make sure you aren’t accidentally exposing jellyfins port directly to the internet
Same thing for Jellyfin?
What have you been doing since you stopped programming?
Alternatively, why did you stop (seriously) programming?
Do you take this so personally that you are now resorting to ad hominems? My guy. 🤭
Is this your personal project? Why are you getting this butthurt? I just don’t care about AI, because I don’t need to use it. And I don’t have to care about AI for anyone.
You should see my inbox full of people just like you yapping on and on about this n8n thing, explaining what it’s for, when I explicitly said I don’t want to know more.
Listen, so you won’t feel so sad anymore: I’m not opposed to using AI, I’m just sick of hearing about it because I don’t need it for the reasons everybody is saying I should.
Now can you either act like an adult or not talk to me again? Thanks, my dude.
I build paru-bin manually, then it upgrades itself, very handy 😎
Breaking pots.
TriangleSpecialist
Are those the Triforce triangles perhaps?
Have you tried chezmoi?
Skim the link I sent.
Marketing matters. I am not interested. And that’s fine. I don’t have any use for this product, AI or no AI. Everyone can go about their business now and relax all your efforts to make me interested in this. Thank you for showing me that respect.
But it does make it its elevator pitch, so call me not interested. And that’s fine.
You’re entitled to your opinion. 🤷♂️ I will not go near a product that tries to make anything AI the primary focus of itself. This is my opinion and I’m not really looking for anyone to change it, nor am I looking for anyone whose opinion I can change. 😊
Anything that puts on the front page of its project site the use case for itself to relate to AI agents instantly makes me suspicious and not interested. I can’t help it.
Possibly 🤷♂️ As soon as I see AI agent, I stop reading.
Awesome, same 😊 All the best to you buddy!