Not without additional configuration. You’ll need to forward jellyfins port in your router and get a dynamic DNS address. That’s not hard to setup though and there are good free dyndns providers like duckdns.
This should not be downvoted. You should not expose anything straight to the internet unless you know what you’re doing. Use a simple service like Tailscale to create a locally accessible VPN.
Surely has some overlap. You want to open other ports, you want to make sure permissions are properly set on the host machine… What else? HTTPS/SSL to avoid someone in the middle grabbing your password and accessing your media?
Regardless, I’ll look into tailscale. A VPN would have lots of other uses, as there are other applications I would like to use remotely that I don’t want to expose to the internet.
By “know what you’re doing” I mean “understand the consequences”. Anyone can follow a guide that tells them how to open a port on their router. Understanding that in doing so they’re potentially allowing every malicious actor into their home network is not so straightforward.
The easiest and most secure solution is probably tailscale. Just VPN into your local network instead of exposing Jellyfin to the internet.
An alternative I am using is Caddy reverse proxy with Authelia for authentication. So I have to log in to Authelia before I can access Jellyfin. Beware though, it took me like 2 days to properly configure Authelia. It is rather complicated.
That’s only local (unless you‘ve set up your pihole to be accessed from outside your home network already). Locally you can easily access jellyfin from any device
For remote access to Jellyfin you will need your public ipv4 address or a domain that points to it. Since in most cases your public ip isn’t static (unless you specifically pay for that), you’ll need a dynamic DNS address that regularly updates the ip address your domain points to. In case of duckdns you’d have a url like example.duckdns.org that always points to your ip.
If you are unlucky however and only have a public ipv6 address (Dual Stack Lite; highly depends on where you live and what provider you have). I haven’t found an easy free solution to still getting remote access. The easiest I’ve found is getting a domain from cloudflare and using their tunnel. Worked well and I happened to have a domain already. Streaming media via Cloudflare’s tunnel is technically against their tos though.
There are probably more elegant solutions but I have switched to a different provider since, which does offer an ipv4 address so I didn’t need to look into that any more.
It’s extremely easy to use and set up. You can also use it for free for up to 5 users I think and it has a lot more configuration options than Tailscale. In my case I didn’t have to change anything at all though, it was basically plug n play.
Not sure about what you mean by “business oriented”. It seemed pretty simple to me.
Not built into jellyfin but you can use net bird or tail scale to access jellyfin from anywhere you have those apps without exposing jellyfin to the public
I use this all the time on my
Jellyfin
server.I just moved to jellyfin instead of using Plex on my NAS, and I’m so glad that I did.
Bluh. I installed both but went with plex because it was a super easy setup. I’ll take another look at jellyfin.
Also question: can I access stuff remotely via phone like with the plex app without any additional configuration?
Not without additional configuration. You’ll need to forward jellyfins port in your router and get a dynamic DNS address. That’s not hard to setup though and there are good free dyndns providers like duckdns.
Don’t expose Jellyfin to the internet
This should not be downvoted. You should not expose anything straight to the internet unless you know what you’re doing. Use a simple service like Tailscale to create a locally accessible VPN.
“Know what you’re doing”
And
“Forwarded a port to jellyfin”
Surely has some overlap. You want to open other ports, you want to make sure permissions are properly set on the host machine… What else? HTTPS/SSL to avoid someone in the middle grabbing your password and accessing your media?
Regardless, I’ll look into tailscale. A VPN would have lots of other uses, as there are other applications I would like to use remotely that I don’t want to expose to the internet.
By “know what you’re doing” I mean “understand the consequences”. Anyone can follow a guide that tells them how to open a port on their router. Understanding that in doing so they’re potentially allowing every malicious actor into their home network is not so straightforward.
Why not? Have had it accessible via the Internet for 4+ years without incidents
What makes you so sure you haven’t been breached? There have been major security flaws over time.
Proper precautions and monitoring.
Why not? What precautions would you need to take before doing so?
The easiest and most secure solution is probably tailscale. Just VPN into your local network instead of exposing Jellyfin to the internet.
An alternative I am using is Caddy reverse proxy with Authelia for authentication. So I have to log in to Authelia before I can access Jellyfin. Beware though, it took me like 2 days to properly configure Authelia. It is rather complicated.
Also you could use SSH that’s been properly secured
Well, I do want to actually use it though and have my friends be able to use it just as well.
You really don’t. There are plenty of other solutions. If nothing else you could whitelist there ISP instead of allowing all traffic.
What solutions? Especially what solutions that don’t cost me money and are not overly difficult to implement?
What if I’m using my pi hole with a static DNS address?
That’s only local (unless you‘ve set up your pihole to be accessed from outside your home network already). Locally you can easily access jellyfin from any device
For remote access to Jellyfin you will need your public ipv4 address or a domain that points to it. Since in most cases your public ip isn’t static (unless you specifically pay for that), you’ll need a dynamic DNS address that regularly updates the ip address your domain points to. In case of duckdns you’d have a url like example.duckdns.org that always points to your ip.
If you are unlucky however and only have a public ipv6 address (Dual Stack Lite; highly depends on where you live and what provider you have). I haven’t found an easy free solution to still getting remote access. The easiest I’ve found is getting a domain from cloudflare and using their tunnel. Worked well and I happened to have a domain already. Streaming media via Cloudflare’s tunnel is technically against their tos though.
There are probably more elegant solutions but I have switched to a different provider since, which does offer an ipv4 address so I didn’t need to look into that any more.
Tailscale is a great option for this if your user count is low (1-3).
I prefer ZeroTier but both work.
Never used them before. Looks like more business oriented. How do they work out?
It’s extremely easy to use and set up. You can also use it for free for up to 5 users I think and it has a lot more configuration options than Tailscale. In my case I didn’t have to change anything at all though, it was basically plug n play.
Not sure about what you mean by “business oriented”. It seemed pretty simple to me.
Not built into jellyfin but you can use net bird or tail scale to access jellyfin from anywhere you have those apps without exposing jellyfin to the public
there is a very easy to set up alternative using nordvpn (not free) + meshnet.