Advice on remote access to media stack.
reddit / selfhosted

----------------------------------------------------------------------
LJCoates · 2023-11-28 15:48

Hi All,


I was hoping to get some advice on my new media stack. I am a bit of a
Newbie when it comes to this, and I am a little bit confused at the
final step of this. I recently bought a new Raspberry Pi 5, which I am
using as the media stack. On this I have Radarr, Sonarr, Jellyfin,
Jellyseer, Prowlarr and qBittorrent installed using docker. I have
also made sure that both Prowlarr and qBittorent are behind a VPN
(using NordVPN if it matters).


This works fine locally, but I would like this to be accessible
externally. The need for this is that I have some friends who want to
access the media Server. The 3 options I have seen for this are:


a) Open the ports on your router. I know this is very unsecure, even
with jellyfin IP whitelisting, so I dont want to do this.


b) Use a VPN. This would require giving my friends my login to
tailscale/NordVPN mesh, and would be a real pain when using smart TV's
so would also prefer not to do this.


c) Use Nginx to create a weblink. This one I understand the least but
I do have a domain using cloudflare. As far as I know though, this is
against cloudflare TOS.


Am I missing any options here? and does anyone have any good guides on
option 3 that wont break cloudflare TOS?


Thanks in advance.

----------------------------------------------------------------------
notdoreen · 2023-11-28 16:00

Tailscale

----------------------------------------------------------------------
sebasdt · 2023-11-28 16:16

Yup or if your ISP allows port forwarding and you're not behind a
cgnat use wire guard easy

----------------------------------------------------------------------
shaunjanssens · 2023-11-28 16:24

You're missing the easiest option of them all: Cloudflare tunnels. You
don't have to open any ports, your friends don't need to install extra
software and it's free. I don't know about the TOS but I wouldn't
worry to much because it's only a couple of friends.

----------------------------------------------------------------------
Escape_Plissken · 2023-11-28 16:25

VPN or reverse proxy

----------------------------------------------------------------------
zfa · 2023-11-28 20:50

I suspect your friends probably don't need access to your whole media
stack.

What parts they do need access to, and from what type of devices, will
determine the best approach.

----------------------------------------------------------------------
ben-ba · 2023-11-29 00:45

Headscale/tailscale

Only one which can update policies on android.

----------------------------------------------------------------------
Silencer306 · 2023-11-29 08:52

Isn’t that his second option? Do you have to give others access to
your network and login to use the apps? Or how does it work?