Same problem regarding security because if you leave it up to jellyfin to do auth you are betting on the wrong horse. With pangolin auth in front of it you have the same problem as before. Clients can’t handle the additional auth.
Or am I misunderstanding the concept of tunnels wrong? I am using pangolin as a reverse proxy with nice VPN management included. How do you the tail scale style “connect this client to this network that has the jellyfin server on it” thingy?
You have a VPS that relays the pangolin tunnel and a reverse proxy serving the tunnel through a cloudfare + fail2ban protected domain. It should be really cheap since the vps only really runs for the initial auth and connection, and once in a while to update the tunnel IPs. You just give people a domain and a credential for the client.
It sounds complicated but isn’t really. I did it once but then returned to plain tailscale since I don’t really share my server with many people.
Same problem regarding security because if you leave it up to jellyfin to do auth you are betting on the wrong horse. With pangolin auth in front of it you have the same problem as before. Clients can’t handle the additional auth.
Or am I misunderstanding the concept of tunnels wrong? I am using pangolin as a reverse proxy with nice VPN management included. How do you the tail scale style “connect this client to this network that has the jellyfin server on it” thingy?
You have a VPS that relays the pangolin tunnel and a reverse proxy serving the tunnel through a cloudfare + fail2ban protected domain. It should be really cheap since the vps only really runs for the initial auth and connection, and once in a while to update the tunnel IPs. You just give people a domain and a credential for the client.
It sounds complicated but isn’t really. I did it once but then returned to plain tailscale since I don’t really share my server with many people.