Some movies just refused to play for me. Subtitles for certain releases just straight up wouldn’t load on my lg TV, and then instead of nice picture subtitles I got shitty looking ones.

Idk… I ran it in docker and just assumed it’d all work but it doesn’t.

Also, I really like that plex stores you’re watched state on their server. I lost a jellyfin db once and had to remember what shows I was watching. There’s not a good sync to cloud or something feature for that… Yet another container and solution I have to stand up aside from my media

Yeah jellyfin just isn’t as good. After having issues on LG webos where captions won’t load for like 5 minutes and dealing with that for like 2 years I gave up and went back to plex.

I do like how jellyfin can stream av1

For my web ui apps I just use traefik forward auth with Google. Works great for my use case

Bazzite is my daily driver and I really like it

Yeah what you’re talking about is a DMZ, it still won’t help a ton if you don’t have strict firewall controls inside your network too.

I just use wireguard with firewall rules to restrict to just my server with my docker containers on it and my DNS

I still use a reverse proxy, but to get into my network you need to be on VPN. It’s more secure for me I guess.

I use traefik forward auth, even inside my network on VPN, for an extra layer of security for some apps.

My opinion is that port 443 getting accidentally misconfigured by me is just too likely a scenario. With wireguard on my router I also am able to restrict traffic to ONLY my webserver and DNS servers for my devices.

So I guess that’s another positive of wireguard, you can use your own DNS servers for all your phones all the time and always have ad blocking with pihole or something similar, even on mobile.

By using VPN I don’t have to worry about accidentally exposing a website with a copy paste error or something over my reverse proxy. I can also easily restrict who has access to my VPN and do routing rules from my router per device or subnet (for people who aren’t in my family I have a separate subnet I assign with more strict firewall rules)

If this server is publicly accessible and gets pwned, they can use it as a jump box for your internal devices.

Just close 443 and use VPN with ACME DNS challenges for your certs. That’ll help make it even more secure, nothing is fool proof though and a VPN is a good first step

Only if you hook up a torrent client. There’s no requirement to do so

For jellyfin/Plex you can try downloading everything with lidarr

Runs on docker so it should run fine on your system

Good luck with them holding that up in court. Just do it on your own hardware and you’re good to go

Only use it as a backup pihole now. Used to have an *arr stack on it, but needed a beefier pc