No awards are needed, just wanted to share my excitement that while my Jellyfin server still keeps loosing my entire library every 24 hours at least now it has a domain and ssl cert!
That is all. Happy Friday everyone
You must log in or # to comment.
What did you use for zero trust?
a domain and cert doesn’t equal zero trust network.
Right. Zero trust means at the very least you need to add AuthN and AuthZ to every endpoint with no exceptions for internal IP addresses.
Lol.
Still got the library issue, eh? Gonna have to just turn off services/apps/processes until you find the culprit.
lol, yeah. Gitea is next on the list, but I don’t have much more I’m afraid, Immich and Nextcloud are critical apps for me, so if it isn’t gitea or minecraft, then I might just setup a new server out of an old laptop to be my Jellyfin server and migrate my library there.
Are you losing your library on reboot?
Not even on reboot, it just get’s deleted somehow, been happening for the past couple of months and I haven’t been able to figure out why yet. I posted all about it here (https://lemmy.world/post/32756942) if you are interested in reading about it.
Any de dupe tasks running and removing them since it sees them in a backup?
I don’t trust my self with this kind of responsibility.
You didn’t expose it to the internet right?
If you want remote access setup client certs
What’s wrong with exposing Jellyfin to the internet?
You really shouldn’t expose anything directly to the internet. It is a security problem waiting to happen. (Assuming it hasn’t already)
This is how giant botnets form.
What security problems?
Bots randomly attack stuff, and if you leave something insecure, they’ll install a bot net node.
Define “insecure”.
Default passwords, old insecure versions of apps and system packages, etc. “Just getting it working” usually leaves things insecure, and you usually need to take things a step further to secure your publicly accessible services.
Not just old insecure, but current insecure too. Plenty of stuff runs fully current but still vulnerable code. Put it behind a firewall.
I do also have a zero trust network. Zero friends= zero trust
