this post was submitted on 26 Sep 2025
693 points (96.0% liked)

Selfhosted

51838 readers
728 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
 

Well I already have jellyfin running in a container, just have to figure out how to get mum's TV to work with it I guess

log in on a local IP and not the network name and it's working again. but I'll be moving to jellyfin from now

you are viewing a single comment's thread
view the rest of the comments
[–] TrickDacy@lemmy.world 5 points 3 days ago (3 children)

Imo Plex is worth the lifetime pass if you get it on sale.

All the comments saying Jellyfin is better always puzzle me. I've given it like three chances now and each time it feels just as buggy as the last. And that doesn't even consider the fact that you'll need more steps to expose it to the Internet for remote viewing or the fact that there's literally a list of unaddressed security holes https://github.com/jellyfin/jellyfin/issues/5415

[–] Strit@lemmy.linuxuserspace.show 20 points 3 days ago (1 children)

From one of the Jellyfin devs in the issue you linked, posted in April this year:

Now, let's address this clearly once and for all. What is possible is unauthenticated streaming. Each item in a Jellyfin library has a UUID generated which is based on a checksum of the file path. So, theoretically, if someone knows your exact media paths, they could calculate the item IDs, and then use that ItemID to initiate an unauthenticated stream of the media. As far as we know this has never actually been seen in the wild. This does not affect anything else - all other configuration/management endpoints are behind user authentication. Is this suboptimal? Yes. Is this a massive red-flag security risk that actively exposes your data to the Internet? No.

At this point, this over-4-year-old issue has gotten posted to HackerNews more than enough times and gotten quite enough unhelpful peanut-gallery comments like those above.. We are limiting this issue to Jellyfin collaborators only at this point. Most of the big items are already tracked elsewhere (specifically, unauth playback) or have already been fixed. And many other options are now open to us in a post-10.11 landscape now that we have a proper library database ready.

[–] TrickDacy@lemmy.world -2 points 3 days ago (3 children)

That only addresses one of several items.

[–] Strit@lemmy.linuxuserspace.show 10 points 3 days ago (1 children)

Yes, but it's always the one people come back too.

They mention the other issues are either being tracked elsewhere or already solved.

At the end of the day, it's a community project, done by primarily volunteers, who is not making any money doing this. No VC funding to hire developers to take care of these issues.

[–] TrickDacy@lemmy.world 3 points 3 days ago

I understand there's an explanation for it. Doesn't make these things not things to consider when choosing one's solution

[–] somerandomperson@lemmy.dbzer0.com 6 points 3 days ago (1 children)

But it's FOSS, compared to Plex. And it also does not ask for money for anything.

You can also add more security yourself if you want to. Not by coding new stuff into jellyfin, but by adding some sort of auth BEFORE jellyfin.

[–] Chewy7324@discuss.tchncs.de 2 points 2 days ago* (last edited 2 days ago) (1 children)

Setting up auth before Jellyfin breaks clients. This is not an option. Edit: Unless you meant VPN like Tailscale, but then you'd have to install Tailscale too, which I don't want to explain to others.

[–] somerandomperson@lemmy.dbzer0.com 1 points 2 days ago (1 children)

Tailscale needs you to explicitly add your device to the tailnet, so it's some form of authentication.

Also, why don't you want to explain tailscale? It's really simple.

[–] Scrollone@feddit.it 1 points 2 days ago (1 children)

Good luck installing Tailscale on my friends' LG webOS TVs.

[–] Chewy7324@discuss.tchncs.de 2 points 2 days ago

And making sure Tailscale auto launches on a FireTV stick is a pita too. Telling them to open Tailscale on each start is not an option.

Feel free to go read the multiple writeups from the maintainers that go over each one, we don't need to copy them all here into the comments for you.

[–] Onomatopoeia@lemmy.cafe 2 points 3 days ago* (last edited 3 days ago) (1 children)

So don't expose it to the internet - which should be the default stance for anything.

The internet was (mistakenly and intentionally) built without security - that doesn't mean we should just accept that, but instead build everything with our own security.

Numerous mesh VPN solutions exist: Hamachi has been around since at leas 2006. NeoRouter since at least 2012. Then we have Wireguard and Tailscale, and others.

Business build their own tunnels between locations, using routers/gateways with that capability. Consumer routers from Linksys could do this in 2006.

There's zero excuse for running anything exposed to the internet.

In closing NO SOFTWARE is free of bugs. With Plex you get to pay for those bugs and still have software that depends on a connection even though you're hosting and viewing your own media, locally.

You wanna denigrate Jellyfin, at least be honest about the pros/cons between the different solutions.

[–] TrickDacy@lemmy.world 5 points 3 days ago (3 children)

So don't expose it to the internet

No

Thwres zero excuse for running anything exposed to the internet.

...except this entire thread is based on a use case for it

With Plex you get to pay for those bugs and still have software that depends on a connection even though you're hosting and viewing your own media, locally.

You're condescending dude. I wouldn't be using Plex if I didn't understand like 37 things you're implying I don't understand here. I paid for it once, it was a good value for me, and I find it pretty weird that you apparently want to admonish me for that. If you want to use jellyfin have at it. I found it buggy to the point of barely being usable. Just sharing that experience and I don't need anyone to agree with that.

[–] possiblylinux127@lemmy.zip 1 points 2 days ago (1 children)

Don't expose stuff to the internet

[–] TrickDacy@lemmy.world 1 points 2 days ago* (last edited 2 days ago) (1 children)

Are you advocating for an self hosting to only exist locally? Or are you advocating for hosting everything on corporate servers?

[–] possiblylinux127@lemmy.zip 0 points 2 days ago (1 children)

Don't expose things to the internet

That goes for corporate settings as well as personal stuff. You almost certainly do not need your self hosted services to be publicly accessible by bots. Anything on the internet gets pounded.

[–] TrickDacy@lemmy.world 1 points 2 days ago* (last edited 2 days ago)

... You just literally said hosting shouldn't exist. You are using the Internet right now.

Also pretty weird to keep phrasing this as a command, discounting an entire class of use cases to be invalid because bad actors exist?

[–] AbidanYre@lemmy.world -1 points 2 days ago (1 children)

...except this entire thread is based on a use case for it

Except it's not. OP is trying to watch stuff on his own network.

[–] TrickDacy@lemmy.world 5 points 2 days ago

Then they aren't doing it correctly, or lying. That is an included/free feature. They advertise it that way and other users ITT say it works. I've no reason to doubt them.

[–] non_burglar@lemmy.world 0 points 3 days ago (1 children)

The problems with Plex are not technical. The problems from Plex are that they take away features and change the terms of use to the detriment of the user. Given plex's pricing changes over the last year, I would be concerned that your lifetime pass be affected by some policy change.

[–] TrickDacy@lemmy.world 5 points 3 days ago (1 children)

Yes, they changed the free featureset, and afaik those changes were fair. Providing a tunnel for remote streaming for free doesn't seem like a good business plan. I mean, yeah they could always back out of the promise of what a lifetime pass is, and if they do I will find a new solution and hope they're sued for it.

If they do back out of their lifetime commitment, I suspect that would drive some other similar apps to get better. Maybe I would even learn to live with jellyfin as it currently exists in that situation. But so far I don't see a reason to, and that would almost have been true if I never paid for plex.

[–] non_burglar@lemmy.world 1 points 3 days ago (1 children)

Fair enough.

I'm speaking from both sides here, having used Plex for years and now jellyfin:

Don't tie technical competence of a product with its monetary cost. They are not necessarily equivalent.

[–] TrickDacy@lemmy.world 1 points 3 days ago

I didn't realize I did that. Given that my opinion on OSes is that "the larger the budget, the shittier it is", I don't knowingly do what you're suggesting here. Linux over windows and macOS any day.

[–] TeddE@lemmy.world 1 points 2 days ago

I used Plex for privacy reasons. I stopped using Plex for privacy reasons.