So I’m trying to get Jellyfin accessible on the open web through a cloudflared tunnel

I have a default install of Jellyfin running that is still accessible locally.

I’m able to ping TV.myblogdomain.com

And the Cloudflared dashboard says the connection is up.

I have implemented page rules and caching rules to turn CDN off.

I have set the DNS server on the Jellyfin VM to be the Cloudflared DNS server.

It’s pointed to https://jellyfin:8096/

And it wasn’t working with or without a CIDR in the tunnel configuration.

Should I try uninstalling fail2ban and see if that helps? I thought I configured it right pointing it to the 8096 port but maybe I need to do 80/443?

Any tips or guides would be appreciated.

  • Xanza@lemm.eeEnglish
    6·
    4 hours ago

    https://jellyfin:8096/

    Port 8096 is the default HTTP protocol port, and you’re trying to access it via HTTPS. Do you have certificates installed and available for your jellyfin instance? If not, it’s very likely Cloudflare won’t route it correctly.

    I’m not saying this is your specific issue, but it’ll be the one after you fix this one at least. You may need to mess with the cloudflare “current encryption mode” to get this to work.

    • nagaram@startrek.websiteOPEnglish
      12·
      3 hours ago

      I believe this is incorrect. I can’t find the forum post from Cloudflare but you cannot use the CDN to deliver video without paying for it, but you can use CF as a reverse proxy via Cloudflared to deliver video so long as you aren’t on the CDN

      They even have blog posts on using Cloudflared for hobby video streaming projects like a RPi pet cam. Unless it’s assumed I have an enterprise account.

      https://www.cloudflare.com/service-specific-terms-application-services/#content-delivery-network-terms

      Unless you are an Enterprise customer, Cloudflare offers specific Paid Services (e.g., the Developer Platform, Images, and Stream) that you must use in order to serve video and other large files via the CDN. Cloudflare reserves the right to disable or limit your access to or use of the CDN, or to limit your End Users’ access to certain of your resources through the CDN, if you use or are suspected of using the CDN without such Paid Services to serve video or a disproportionate percentage of pictures, audio files, or other large files. We will use reasonable efforts to provide you with notice of such action.

      • calamityjanitor@lemmy.worldEnglish
        1·
        1 hour ago

        My understanding is that it’s technically against their TOS but loosely enforced. They don’t specify precise limits since they probably change over time and region. Once you get noticed, they’ll block your traffic until you pay. Hence you can find people online that have been using it for years no problem, while other folks have been less lucky.

        Basically their business strategy is to offer too-good-to-be-true free services that people start using and relying on, then charging once the bandwidth gets bigger.

        It used to be worse, and all of cloudflare’s services were technically limited to HTML files, but selectively enforced. They’ve since changed and clarified their policy a bit. As far as I’ve ever heard, they don’t give a toss about the legality of your content, unless you’re a neo Nazi.

        • nagaram@startrek.websiteOPEnglish
          2·
          34 minutes ago

          unless you’re a neo Nazi

          I hate being torn between my hatred of tech monopolies and love of seeing Nazis get their shit rocked.

      • N0x0n@lemmy.mlEnglish
        1·
        2 hours ago

        Sure if you only intend to stream your pets RPi webcam nothing to worry :) ! But don’t even get into streaming illegal content you don’t own !

        I mean, your jellyfin instance is not going to be hooked to a Arr stack, is it?

        • nagaram@startrek.websiteOPEnglish
          1·
          2 hours ago

          I don’t know what that is. So no.

          And obvious it’s all movies and TV shows I own that’s just conveniently ripped for sharing with friends and family :)

  • calamityjanitor@lemmy.worldEnglish
    1·
    3 hours ago

    I’m guessing the cloudflared daemon isn’t connecting to jellyfin. You want to use http://. Also is jellyfin the hostname of the VM? Using localhost or 127.0.0.1 might be better ways to specify the same VM without relying on DNS for anything.

    Personal opinion, but I wouldn’t bother with fail2ban, it’s a bit of effort to get it to work with cloudflare tunnel and easy to lock yourself out. Cloudflare’s own zero trust feature would be more secure and only need fiddling around cloudflare’s dashboard.