this post was submitted on 19 May 2026
327 points (97.7% liked)
Technology
84807 readers
5537 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Last I looked, jellyfin auth and public facing security were less than ideal.
How far has that come in the last few years? I have plenty of people using my Plex and it's been secure. I had heard a public facing Jellyfin wasn't super secure.
Honestly, 95% of the reason I use Plex is so I don't have to manage user passwords and troubleshoot issues for my friends and family. I just grant access.
I moved from the default jellyfin login method to using Authentik as the identity provider. Now its part of my homelab setup where all services have SSO, and I don't have to create/manage an account for each person for each service.
Does that break Jellyfin apps on smart TVs or media devices?
A lot of people seem to have concerns with how Jellyfin handles access control and some have stated that the developers marked some major issues as “won’t fix”. Is there somewhere I can catch up on that?
LDAP works fine, OIDC not so much, only the web client would work.
There are still talks around making OIDC a first class citizen and IIRC it is planned as per the feature page but I guess the major core upgrade around the DB took a lot of attention the last 6-12 months.
But in the meantime I've just spun up an LDAP outpost for my Authentik that my Jellyfin connects to. It breaks MFA but otherwise it works. It may be a bit confusing for users that they log in at jellyfin.site.com but anything user-related like updating password is at authentik.site.com and requires an extra login.
I only need my server to work locally so I haven't messed with that part personally. But I've read that setting up tailscale is straightforward and works fine. There are many other solutions to the problem. I would definitely invest a lot of effort before paying for Plex.
Great; how do I setup Tailscale on my mother’s Roku TV?
https://www.gl-inet.com/products/gl-ar300m/
Configure one of these to sit between the TV and your mother's network and pass all the tv traffic through an exit node on your jellyfin network.
Most smart TVs have a tailscale app you can install directly on device. Roku is an exception to that.
Nope. How do I do it on the TV directly?
I bring this up every time someone parrots off the Lemmy line of “Jellyfin” because that’s all you all know. Not what’s best for the use case, just ram Jellyfin in there shortcoming and all.
Unfortunately, that's probably not gonna happen without some new hardware.
You could setup a wire guard at the router (can you setup tail scale on a router? idk). If she's renting the ISP router, replacing that could save a 100+ a year, depending on how much the isp is scamming her for it.
or you could repurpose a minipc/nuc from bay and set up a jellyfin streaming box with tailscale.
If you have the extra hardware, you could also setup a local server with her jellyfin and use wiregaurd/tailscale to remotely connect to it and run backup/sync during off-hours.
So, no answer because I can’t. I’m not replicating buying hardware for all of the people who are on my plex account to move them to some free software because all y’all who shout “Jellyfin” do so because you do t want to pay for anything.
Why doesn’t anyone ever mention Emby? Oh, right, because you have to support the project and no one wants to do that.
Plex isn’t in the right here, but yelling Jellyfin ever. Single. Time. Is like using a hammer to tighten a screw; it’s not always the right tool for the job and tall look like morons for just blindly parroting what others say.
Bro, if you want to use Emby, nobody is stopping you. Jellyfin is the popular solution because it is open source. Emby isn't a project, it's a product just like plex is a product. Both Emby and Plex started as free methods to host your media and converted to a paid closed source solution. Jellyfin is a fork of Emby from before they moved to closed source and remains free and open to this day.
No one is stopping you from recommending it either.
Are you OK? I didn't realize my comment was so inflammatory. I just love Jellyfin and don't appreciate Plex's actions over the years. You love Emby. That's cool! Use what works for you.
Byeeeeee
You could also set up a reverse proxy in front of your Jellyfin and hook a domain up to it. That way you don't have to worry about the client at all.
Still have that nasty vulnerability where people can delete your data remotely.
The data for me is shared read-only to the Jellyfin container, so that's not a problem.
Can you explain more about that vulnerability? It would necessitate a pretty serious privilege escalation to be possible.
https://www.sentinelone.com/vulnerability-database/cve-2021-21402/
Google’s your friend