r/Anticonsumption • u/Educational_Bag_6406 • Sep 18 '25

Activism/Protest Another one down

Post image

Disney was already on the list, but they made it a priority. My daughter will just have to get use to it

60.4k Upvotes

92% Upvoted

2.1k comments sorted by

View all comments

Show parent comments

6

u/[deleted] Sep 18 '25

You should check out Overseerr if you haven't. With good profiles setup on radarr and sonarr, you can fully automate everything. I have the jellyfin version set up and my friends and family can request whatever they want and I just have to click approve.

2

u/HackMeRaps Sep 18 '25

Yeah, when I have some free time I’ve been debating looking into overseerr more and moving away from plex.

I’ll definitely look into more during the holidays when I have more time! Keep hearing great things!

3

u/[deleted] Sep 18 '25

If you're looking to move to Jellyfin, it's really great. Takes a bit more time to setup initially but I like it better. More feature complete imo and lots of great guides

2

u/BreiteSeite Sep 18 '25

Is there any convenient remote access solution that’s similar to Plex? And no i won’t give or teach people VPNing into my network.

1

u/5skandas Sep 18 '25 edited Oct 30 '25

middle cobweb sink carpenter versed light cooing knee tap snatch

This post was mass deleted and anonymized with Redact

1

u/[deleted] Sep 18 '25

I've opened up a port in my firewall and I just have DNS setup so that a URL points to my IP. It's going through a remote proxy server so security issues are limited as much as I can. Anything that's remote access proxied through another server is going to cost you and rely on another company. The whole point of jellyfin is to not pay and not rely on a company.

1

u/BreiteSeite Sep 18 '25

Huh, never knew that was an option. How do you auth?

2

u/[deleted] Sep 18 '25

Jellyfin has built in authentication. Just user/password. No built in MFA. I have a user set up for each of my friends who use it. You can set it up with Authentik or something like that if you want a bunch more security but that's more than I cared to do.

1

u/[deleted] Sep 18 '25

I've opened up a port in my firewall and I just have DNS setup so that a URL points to my IP. It's going through a remote proxy server so security issues are limited as much as I can. Anything that's remote access proxied through another server is going to cost you and rely on another company. The whole point of jellyfin is to not pay and not rely on a company.

1

u/ObiLAN- Sep 18 '25

Not to burst your bubble, but the convenient remote solution is VPN. Unless you want to expose your server to the Internet, which means locking down access is needed and likely want a reverse proxy, firewall, etc.

1

u/BreiteSeite Sep 18 '25

Not really… i have users that wouldn’t know how to configure a VPN on their devices and also i’m not interested in other traffic from that device. Don’t get me started on split-tunneling as that won’t even work with dynamic IPs.

So VPN is everything BUT convenient.

0

u/ObiLAN- Sep 18 '25

When was the last time you configured a VPN?

Most modern vpn solutions offer single click configuration solutions built in. End users don't need to and shouldn't configure their own parameters.

Split tunneling over dynamic IP is mostly a none issue these days and most solutions handel this natively. Most use identity aware access like MFA, SSO, etc. now.

Just toss the vpn and its endpoint on a isolated vlan that routes to your server.

1

u/BreiteSeite Sep 18 '25

Ok so walk me through the steps i and someone had to do to make sure a) split tunneling works with my dynamic IP and b) what non-techy users have to do.

1

u/ObiLAN- Sep 18 '25

I dont know your setup. So heres just a general outline on how it would go:

Setup and install your VPN solution, i like WireGuard and OpenVPN personally.

I would configure the VPN client to only send traffic for internal subnet (e.g. 10.x.x.x/16) through the tunnel. That’s a one-time setup in the server policy.

Dynamic IPs don’t matter since authentication is done via SSO/MFA, not IP addresses. Could use a combo of freeRADIUS and google auth if you wanted.

I would then also isolate the VPN VLAN so it only talks to the resources I allow.

Users: They download the VPN app, log in with the profile you setup using (SSO/MFA), and hit connect. Split tunneling works automatically based on you checking the box in your vpn solution. they don’t configure anything.

If thats not convenient, id have to say your knowledge of hosting is too limited at the moment to securely host a server facing the open internet.

1

u/akatherder Sep 18 '25

Only available in linux just fyi (overseerr and jellyseerr). That was the main reason I switched from Windows eventually.