this post was submitted on 19 May 2026
278 points (97.0% liked)
Selfhosted
60177 readers
677 users here now
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
-
Be civil.
-
No spam.
-
Posts are to be related to self-hosting.
-
Don't duplicate the full text of your blog or readme if you're providing a link.
-
Submission headline should match the article title.
-
No trolling.
-
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details.
Resources:
- selfh.st Newsletter and index of selfhosted software and apps
- awesome-selfhosted software
- awesome-sysadmin resources
- Self-Hosted Podcast from Jupiter Broadcasting
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Unless your user comes and logs in on your network, and only streams when they’re at your house, then you’ve just opened your server to the world.
Plex has bandwidth controls.
Tailscale and IP whitelisting are both viable options
No they’re not. No one is connecting their tv to Tailscale, especially not your parents or grand parents, and ip whitelisting is still dangerous and insecure on networks you don’t control.
Tailscale has native clients for all the major TV OS'. And I'm not whitelisting public networks for my friends' convenience. If they're traveling, they use tailscale with their mobile device or not at all. If you're talking about IP spoofing that's not a realistic vulnerability concern for a home media server.
At least I know the potential attack vectors for my Jellyfin server and can mitigate potential security concerns.
No it doesn't lol. Only the extreme minority of people are using TVs that can even install apps.
Yet on plex there aren't any lol. If you're opening your server to the internet, and giving other people access, it's not secure - especially via software like JellyFin where the devs even know and say it's not secure.