Selfhoster1728

joined 5 months ago
[–] Selfhoster1728@infosec.pub 6 points 1 month ago

That's just the nature of service migration; of course for people like you who are very dependent on it, it's not a no-brainer, but for anyone who wants to start hosting one of the two, yes it will be.

In your case yes Plex is more appropriate but at the same time the clock is ticking for Plex if they continue on this route...

[–] Selfhoster1728@infosec.pub 401 points 1 month ago (285 children)

I don't know why everyone in the selfhosting community still even mentions Plex or uses it.

It's closed source, not free; Jellyfin is a no brainer yet people still go to Plex??

[–] Selfhoster1728@infosec.pub 4 points 1 month ago

Librewolf (privacy focused firefox fork) syncing the user folders with Syncthing maybe?

[–] Selfhoster1728@infosec.pub 11 points 2 months ago* (last edited 2 months ago) (2 children)

See this issue on their github repo: here

Basically from what I understand there's loads of unauthenticated api calls, so someone can very easily exploit that.

If they just supported mTLS in their clients it wouldn't be an issue but oh well :(

[–] Selfhoster1728@infosec.pub 48 points 3 months ago (3 children)

Oof was looking to start selfhosting this but it has no client Linux support and has a subscription 😬😬

[–] Selfhoster1728@infosec.pub 9 points 3 months ago

Made me learn about Archiveteam, thanks :D

[–] Selfhoster1728@infosec.pub 2 points 3 months ago

You're right actually it's not native I don't know what I'm on about 😅 Still it's much easier to have a baked in terminal app than having to install proot on top of termux, hopefully it will have less of a performance impact than proot as well.

[–] Selfhoster1728@infosec.pub 3 points 3 months ago* (last edited 3 months ago) (2 children)

Just installed arch with chroot on my old rooted phone a week ago.

Seeing this is great because it means there's no need for complicated workarounds or even root access! Plus the distro runs natively and not with difficulties like with chroot :D

[–] Selfhoster1728@infosec.pub 2 points 3 months ago

yep

In my opinion it's the best solution because there's a really low attack surface plus it makes it easy to control which device has access to which services.

[–] Selfhoster1728@infosec.pub 1 points 3 months ago (2 children)

Not any in particular but mTLS is essentially just a reverse proxy (like nginx) asking a client for a certificate to be able to access the service behind it.

There are quite a few guides out there, so choose one for your reverse proxy of choice!

[–] Selfhoster1728@infosec.pub 1 points 3 months ago* (last edited 3 months ago)

Tailscale is simpler but when you're accessing from devices behind VPNs like I do mTLS is a lifesaver.

I use DAVx⁵ for caldav (supports mTLS)

I find mTLS cool too :P

In terms of being a pain it's not that bad with nginx in my opinion. I can just build my own certificate for each service I expose or you use a common one, giving read only access to the key for my nginx containers and in two lines in the .conf it's sorted.

[–] Selfhoster1728@infosec.pub 3 points 3 months ago (6 children)

mTLS with a reverse proxy!

view more: next ›