Does Jellyfin only work on Roku via the the unprotected IP? I set up a reverse VPN and now my friends can't access the domain on their Roku reddit / selfhosted ---------------------------------------------------------------------- maxkmiller · 2023-12-29 17:05 Are there still risks if they're accessing the unprotected IP just from their personal home network? For all other applications the domain I set up, eg., jellyfin.domain.com, works fine. Roku is the only one giving trouble, and this is the main way a lot of my friends would watch at home on their tv ---------------------------------------------------------------------- Judman13 · 2023-12-29 21:11 I have a few rokus connectes to jellyfin through a domian name and reverse proxy. It should not be a problem. I use https://jellyfin.domain.com with no issues. You should be able to test it by hitting the domain from a cellphone and getting the webui. If not there is something else wrong. ---------------------------------------------------------------------- maxkmiller · 2023-12-29 21:13 It works fine on desktop browsers, mobile browsers, and the mobile app. Just not roku. I should add that only http://jellyfin.domain.com and https://jellyfin.domain.com works, but adding the www prefix does *not* work on any device. does this matter? ---------------------------------------------------------------------- Judman13 · 2023-12-29 21:18 Is the mobile browser a cellular connection or wifi connected to the same lan as the jellyfin server? ---------------------------------------------------------------------- maxkmiller · 2023-12-29 21:20 cellular connection, confirmed by me and my remote friends ---------------------------------------------------------------------- Judman13 · 2023-12-29 21:24 Weird, well there is no reason no to use the servers ip:port to connect to jellyfin if you have the vpn and routing to make that happen. Sorry for the little detour. ---------------------------------------------------------------------- maxkmiller · 2023-12-29 21:25 if my friends are only connecting to the unprotected IP from their personal home networks, it's generally safe, right? not like they can use roku in public anyway, and the VPN would work for those scenarios ---------------------------------------------------------------------- Judman13 · 2023-12-29 21:29 Im not sure what you mean by unprotected ip. It's not a normal english networking word. Do you mean your public IP given by your ISP (assuming no cg nat) or the internal lan IP of the jellyfin server (ie 192.168.1.10 or 10.0.10.10 etc)? ---------------------------------------------------------------------- maxkmiller · 2023-12-29 21:32 before I set up the vpn, my friends were connecting to my jellyfin by going to xx.xxx.xxx.xx:8096 (X's being my home IP). I was told this was a security risk so I set up the VPN. But is my understanding that the security risk only exists if people are connecting in public places correct? ---------------------------------------------------------------------- Judman13 · 2023-12-29 21:59 The risk is you have set up a port forward in your network direct to the jellyfin server. So yes it can be considered a security risk. For the domain name to work you need properly configured dns record with your registrar and a reverse proxy set up on your network. A vpn can also be used, but it will require routing a firewall rules on both networks in order for the traffic to know where to go. Not an easy task. ---------------------------------------------------------------------- LoadingStill · 2023-12-30 02:56 The www is just a different subdomain. It is not needed to make it work. Unless you set your urls to use www then it would matter. But if you did not set a cname or aaa for www I would not worry about www ---------------------------------------------------------------------- primalbluewolf · 2023-12-30 07:01 > But is my understanding that the security risk only exists if people are connecting in public places correct? No, that understanding is incorrect. If it is possible to connect to your server through your public IP address on that open port, there is going to be lots of attempts to do so, automatically, by bots. This is what the VPN is supposed to resolve: it makes it much harder for bots to attack your site like this.