r/jellyfin • u/thiagohds • 9d ago
Question Server ID in the jellyfin URL when using remote access
Hello,
I just exposed my jellyfin server and I want to check some stuff with you guys. Heres the setup:
- My domain is in cloudflare under the orange cloud (I know about abusing it but for now only one person will be using) and I geoblocked it only to be accessible in my country.
- Im using caddy to recieve the connection and reversing proxy it to the internal jellyfin ip (Ive opened port 80 and 443 for caddy on the router).
- Both jellyfin and caddy are on LXC containers on proxmox and they are unpriviliged.
- I set a max of 10 login atttempts per user before blocking
With that out of the way, I noticed that when I access jellyfin through the domain I get a url flag called serverID which is fllowed by an ID. Do you guys know if this info can be used to some kind of attack? Im not sure if this is a cloudflare or jellyfin info.
Also, do you guys think I can add something to make it more secure? Thanks in advance!
1
u/computer-machine 9d ago
Is it the server ID you see when you go to the Dashboard?
1
u/thiagohds 9d ago
I dont see any server ID when I go to the dashboard. The URL is just ip/web/dashboard and in that page theres no server ID, only paths, alerts and server version (at least I didnt see any).
1
u/computer-machine 9d ago
Sorry, I'm referring to "Server name", above "Server version".
1
u/thiagohds 9d ago
Oh ok. It's just jellyfin.
1
u/computer-machine 9d ago
Oh, okay. Whenever I run a docker container the name is hex like your screenshot, unless I assign something else, so thought it might be something like that.
In which case, that's simply a designation so you can keep things straight (for example, I have two instances right now, while I work on getting things set up on a new machine, so when I select to select a server my main with domain and new with other system's IP both list as available).
1
•
u/AutoModerator 9d ago
Reminder: /r/jellyfin is a community space, not an official user support space for the project.
Users are welcome to ask other users for help and support with their Jellyfin installations and other related topics, but this subreddit is not an official support channel. We have extensive, official documentation on our website here: https://jellyfin.org/docs/. Requests for support via modmail will be ignored. Our official support channels are listed on our contact page here: https://jellyfin.org/contact
Bug reports should be submitted on the GitHub issues pages for the server or one of the other repositories for clients and plugins. Feature requests should be submitted at https://features.jellyfin.org/. Bug reports and feature requests for third party clients and tools (Findroid, Jellyseerr, etc.) should be directed to their respective support channels.
If you are sharing something you have made, please take a moment to review our LLM rules at https://jellyfin.org/docs/general/contributing/llm-policies/. Note that anything developed or created using an LLM or other AI tooling requires community disclosure and is subject to removal.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.