I think Emby failed to get a lot of momentum due to having hardware acceleration behind a paywall, and then having jellyfin out there offering it for free. When I was first getting away from plex, emby was my first stop, and then I moved over to jellyfin shortly after because of the hardware acceleration situation.
Library scans and picking up added/removed media, kill me. I love kodi, but how such a basic function can be so squirrely I’ll never understand. Maybe it’s just a quirk with NFS back ends.
It’s not going to randomly disappear your data, but I don’t particularly trust it either. As with anything, keep to a back up strategy. As far as efficiency goes, if you bear in mind it is still a VM but with most of the configuration hidden away for a simpler experience, I would say it is more convenient than a VM under virtualbox or vmware player, especially if you have no need for a full linux desktop environment.
Pretty much. It’s hyper-v under the hood giving you a linux VM that’s integrated just enough to keep up some sort of linux workflow. I’m happy to shit on it as much as the next person, but for many who are locked into a ms corporate ecosystem because work policy, it’s a decent little window in your jail cell.
Never has there been a more fitting username with a comment. It’s so true. I would hop over to another more future proof solution in a heart beat if it existed. This is all compounded by the fact that once you learn the quirks and get it in a good place you start not minding it so much. It’s somewhere between sunk cost fallacy and Stockholm syndrome.
Awesome, thank you, this is exactly what I was thinking when you mentioned it earlier.
I figured it was the enforcing of the trusted proxy mechanism mentioned in the release notes (only noticed because of an earlier thread here, thanks!). Once I updated my server and set the proxy settings all my clients needed to be signed again.
Yeah I don’t think anyone sane would disagree. That’s what forced the decision for me, to expose or not. I was not going to try talking anyone through VPN setup, so exposure + whatever hardening practice could be applied. I wouldn’t really advocate for this route, but I like hearing from others doing it because sometimes a useful bit of info or shared experience pops up. The folder path explanation is news to me; time to obfuscate the hell out of that.
I think they’re meaning exposing it to the public for the pirate tv use case. In my personal experience (1 non savvy user using the roku app, no vpn), it’s not much support. I had to talk them through initial sign on, and through re-sign-on after that latest update that forced it. Of course ymmv, but two 5 minute tech sessions with grandma over 2 years of consistent usage ain’t that bad.
My automated workflow is to package up backup sources into tars (uncompressed), and encrypt with gpg, then ship the tar.gpg off to backblaze b2 and S3 with rclone. I don’t trust cloud providers so I use two just in case. I’ve not really been in the need for full system backups going off site, rather just the things I’d be severely hurting for if my home exploded.
But to your main questions, I like gpg because you have good options for encrypting things safely within bash/ash/sh scripting, and the encryption itself is considered strong.
And, I really like rclone because it covers the main cloud providers and wrangles everything down to an rsync-like experience which also pretty tidy for shell scripting.
Honestly I’m not sure, or maybe I knew but forgot. Since working out my needs I wrote it to ansible and never looked back. Worth trying the more secure way for sure.
I do this on the minimal Debian release which is essentially coming from the same place, you’re left to get things configured with a root user or maybe a privileged user after install. There’s a few things to tweak for rootless podman and it will vary based on the distro. The gist for me and Debian is:
net.ipv4.ip_unprivileged_port_start=<start of lower range of ports rootless containers will use>podman run --name jenkins --user jenkins --userns=keep-id:uid=1000,gid=1000 ...
Again, that’s just Debian, never tried MicroOS, but if MicroOS isn’t doing anything special to accommodate rootless podman I imagine these steps are somewhat applicable. One issue I ran into was with an older version of Podman, whatever comes with Ubuntu 22: That version of podman requires you to set the namespace mappings; Debian 12’s version does not and the --userns=keep… flag just works.
I expose jellyfin to the internet, and some precautions I have taken that I don’t see mentioned in these answers are: 1) run jellyfin as a rootless container, and 2) use read-only storage where ever possible. If you have other tools managing things like subtitles and metadata files before jellyfin there’s no reason for jellyfin to have write access to the media it hosts. While this doesn’t directly address the documented security flaws with jellyfin, you may as well treat it like a diseased plague rat if you’re going to expose it. To me, that means worst case scenario is the thing is breached and the only thing for an attacker to do is exfiltrate things limited to jellyfin.
This really goes far in explaining all the autism in the pre industrial eras. Genius, really.
If you’re looking for more tinkering on the music around the house front, Lyrion music server + squeezelite players can be a very fun endeavor. I think it gets a little sketchy if you’re favoring automation and casting, but as a network of players that will utilize a wide swath of hardware, it shines. I had a bunch of pi4s laying around and eventually repurposed them all into a multiroom audio gang.
Startmail (from the Startpage folks) has been fine for me. You pay for it, you can put your domain on it, you can do alias addresses, works with any IMAP client since it’s just IMAP ran by a (so far) competent company. Their web ui is fine, but ive only used it for initial setup. Besides Thunderbird on mobile I use Snappymail within Nextcloud and this works just fine as well. All I can say is it does what it says on the tin.
This isn’t a complete solution, but trakt.tv covers a lot of ground. I started using it for getting a consistent history of watched shows between jellyfin on the road and kodi at home. It works okay enough for this, though at times it does seem that one or both of the plugins can fail to log a watched show. I would guesstimate a 90% success rate.
My favorite open secret of the internet. It’s crazy to think how long that network has been running. I think I stumbled on it around 2003. Thanks for pointing out this client. I’ve been relying on a rickety container build that uses novnc and nicotine+ to give a quasi-portable experience. It will be nice to ditch that, hopefully.
If you have the time to spare (a few weeks perhaps, if coming from zero) to experiment and read, Prometheus and Grafana offers a lot and can be really flexible. I use a pretty simple bash script that scrapes my desired https endpoints and writes out the results to a file Prometheus (node-exporter) understands, and from there I can write alert rules in Grafana to fire off notices by email or slack.
Same here regarding *arrs handling the data movement/layout and nfo files. I even have the “Connect” sections for each set to trigger rescans, but it seems especially for files that get replaced by a more optimal version, a duplicate is left over in kodi alongside the new one which only goes away when you try and play it. I tried switching to a dedicated mysql instance for shits and giggles, no effect. Some day I’ll actually dig in the logs.