Privacy of Jellyfin and Nextcloud
reddit / selfhosted

----------------------------------------------------------------------
sushikingdom · 2023-11-06 19:30

If I don’t open any ports on my router, is my self hosted services
secure?

I have Jellyfin and planning on installing Nextcloud. I’m using OMV +
Docker.

----------------------------------------------------------------------
thekrautboy · 2023-11-06 19:32

> If I don’t open any ports on my router, is my self hosted services
secure?

If you only park your car in your garage and never take it out, is it
secure? Yes, pretty much.

Is it secure from a earthquake taking down your entire house and
garage? No.

----------------------------------------------------------------------
EnterpriseGuy52840 · 2023-11-06 19:42

It's as secure as the people on the network make it. If you have a
compromised machine, that machine is under the control of someone else
and can hit your hosting machines assuming they can reach them.

Follow the rule of DCSS -> Don't click stupid stuff.

----------------------------------------------------------------------
ArgoPanoptes · 2023-11-06 20:25

Even if you connect from LAN only, you should still put those services
behind a reverse proxy to use HTTPS.

----------------------------------------------------------------------
Diligent_Ad_9060 · 2023-11-06 20:31

Jellyfin has some features that reach out to all kinds of services to
get meta data. Not sure if it's enabled by default.
But if you care about privacy that may be something to investigate.

----------------------------------------------------------------------
Glad_Accident_5209 · 2023-11-06 23:21

Why you should setup a reverse proxy if you dont want to access it
over the Internet?

----------------------------------------------------------------------
ArgoPanoptes · 2023-11-07 05:09

You can use local domains like .local or .arpa to access your services
in the LAN instead of using the IP. By doing so, you can add a reverse
proxy, which will make it easier to use always HTTPS instead of
setting it for each service.

----------------------------------------------------------------------
Trustworthy_Fartzzz · 2023-11-10 02:03

Assume breach is my official stance at home and at work.