I’m aware of this (that’s why I described a potential breach as Jellyfin -> LXC escape). What it does provide me is a static IP to point my domain at that I don’t have to worry about updating via whatever DDNS service and that isn’t tied to my home address. That and the wireguard tunnel gives me plausible deniability should my ISP ever decide to enforce its rules against hosting servers. 😀
I have a very cheap ($11/yr) us-based vps through racknerd I got via low end box. I’ve got 12 users but only 5 really active ones and I’ve never come close to hitting the 1tb transfer. I serve several services through that one vps (all just reverse proxy to my homelab).
I did just pick up another u.s. based vps through low end box the other day- $12/yr and unmetered Gbps. 1 CPU only, but a reverse proxy doesn’t need a lot of compute. :)
Depends on what you mean by “secure.” My personal setup is Jellyfin LXC on proxmox --> Wireguard to VPS -> Nginx reverse proxy on VPS.
This setup relies somewhat on Jellyfin’s auth, but I’m comfortable with that risk. The LXC is blocked from sending local traffic on my network by firewall rules. Yes, someone could exploit a vulnerability in Jellyfin (though looking through the CVEs I’m not overly worried about that), then escape the LXC and fuck with my server. But that’s a lot of work for no profit.
For more protection (in sense of reducing traffic that even interacts with your server), I’d recommend getting a wildcard cert for the domain so that the actual subdomain jellyfin is on is undisclosed to anyone not using your service.
Security isn’t about making everything impregnable, it’s about making attacks more trouble than they’re worth. Otherwise, we’d all live in fortified bunkers surrounded by landmines. 🙃
Navidrome. It’s lightweight and works with any subsonic app.
Maybe check your facts. NPR: Trump would have won even if everyone eligible voted
Trump won in 2024 with just under 50% of the vote, 49.7%-48.2% over Democrat Kamala Harris.
Roughly 64% of the eligible-voting population turned out in 2024, the second highest since 1904. 2020 was the highest.
But even if everyone who could vote did, Trump would have won by an even wider margin, 48%-45%, according to Pew’s validated voters survey
Whether it’s your intent or not, the narrative you’re spreading is used to dissuade folks from demanding better than the choice between a shit taco and a turd sandwhich. It affirms a shitty status quo and demands political patience in the face of a fucked up world… to the benefit of fascists and their corporate cronies.
There are ways to make that irrelevant. I use a cheap vps and just have it funnel raw traffic for the ports I need to my home server via wireguard. All my SSL certs live on my machine and the VPS can’t see any of the traffic contents. I suppose they could redirect traffic elsewhere or start serving whatever on that domain, but I would know immediately and there are some limits to my paranoia.
If every HP fan supported the author by buying it, but then volunteered in a soup kitchen one time, they’ve done far more good than bad.
Good and evil aren’t interchangeable, fungible quantities. You can’t punch 20 babies in the face and then feed 100 starving orphans and expect people to forget about one due to the other. The babies stay punched and the orphans stay fed.
With respect to HP in particular, supporting someone who actively and successfully campaigns against trans right hurts trans people. (And tells us that y’all care more about a children’s story than you do living, breathing human beings). Volunteering at a soup kitchen after donating to the exterminate trans people fund doesn’t undo the donation. It does feed some hungry people, but again doing “good” doesn’t erase having done “evil”; both acts still occured.
What people are saying here is literally “please don’t donate to the trans extermination project.”
Finally, there being no ethical consumption under capitalism is an indictment of consumption, not an absolution for any/all consumption. Just because all consumption falls short of perfect ethics doesn’t mean it’s all equally unethical. This should be obvious.
Ummm… Steam Deck.