Just exposed Immich via a remote and reverse proxy using Caddy and tailscale tunnel. I’m securing Immich using OAuth.

I don’t have very nerdy friends so not many people appreciate this.

  • walden@sub.wetshaving.social
    7·
    3 days ago

    A lemmy instance, a wiki, and a couple of other website type things, yes.

    Publicly facing things are pretty limited, but it’s still super handy inside the LAN with Adguard Home doing DNS rewrites to point it to the reverse proxy.

    I appreciate what you’re saying, though. A lot of people get in trouble by having things like Radarr etc. open to the internet through their reverse proxy.

    • Lumun@lemmy.zipEnglish
      3·
      3 days ago

      Am I making a mistake by having my Jellyfin server proxied through nginx? The other service I set up did need to be public so I just copied the same thing when I set up Jellyfin but is that a liability even with a password to access?

      • timbuck2themoon@sh.itjust.worksEnglish
        5·
        2 days ago

        Not really. Personally I’d allow the service account running jellyfin only access to read media files to avoid accidental deletion but otherwise no.

        Also, jellyfin docs have a sample proxy config. You should use that. It’s a bit more in depth than a normal proxy config.