Here’s my proposed configuration:
- OrangePi Zero 3 running DietPi
- Jellyfin with media libraries on an external hard drive
- Dynamic DNS from DuckDNS to access server remotely via Finamp
Is there anything I’m missing? Do I need Lets Encrypt or fail2ban?
If it’s on the Internet, yes.
Given the state of the Internet, you should keep a healthy level of paranoia. I always recommend exposing as little as possible, and that means using only a VPN and not putting jellyfin itself on the Internet.
Oh, the healthy paranoia isn’t the issue haha
I just want to be able to figure out how to configure my system to be able to safely expose a single service for my use away from home. Because I’d like to eventually expand from Jellyfin to Nextcloud and Vaultwarden as well, but I know I’m not there yet
Remote access doesn’t mean opening it up to everyone
Correct. I’d like to make it available to myself and any family members or friends I share it with, but not the wider world
Have you checked out Netbird?
I have not. What is it?
https://netbird.io/
It is a overlay VPN that creates a virtual IP network that devices are in regardless of where they are on the internet. (You don’t even need to open up your Firewall)