this post was submitted on 06 Apr 2025
294 points (98.7% liked)

Selfhosted

45836 readers
435 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
 

cross-posted from: https://aussie.zone/post/19146681

Jellyfin Server 10.10.7

Important Notes

Configurations behind a reverse proxy that did not explicitly configure trusted proxies will not work after this release. This was never a supported configuration, so please ensure you correct your configuration before upgrading. See the updated docs here for more information.

Security

  • Fix validation of API parameters to FFmpeg [GHSA-2c3c-r7gp-q32m], by @Shadowghost
  • Fix trusting forward headers if none are configured [GHSA-qcmf-gmhm-rfv9], by @JPVenson

Note: GHSAs will be published seven (7) days after this release.

General Changes

  • Fix regression where "Search for missing metadata" not handling cast having multiple roles [PR #13720], by @Lampan-git
  • Clone fallback audio tags instead of use ATL.Track.set [PR #13694], by @gnattu
  • Backport 10.11 API enum changes [PR #13835], by @nielsvanvelzen
  • Support more rating formats [PR #13639], by @IDisposable
  • Fix stackoverflow in MediaSourceCount [PR #12907], by @JPVenson
  • Upgrade LrcParser to 2025.228.1 [PR #13659], by @congerh
  • Include Role and SortOrder in MergePeople to fix "Search for missing metadata" [PR #13618], by @Lampan-git
  • Delete children from cache on parent delete [PR #13601], by @Bond-009
  • Fix overwrite of PremierDate with a year-only value [PR #13598], by @IDisposable
  • Wait for ffmpeg to exit on Windows before we try deleting the concat file [PR #13593], by @Bond-009
  • Fix 4K filtering when grouping movies into collections [PR #13594], by @theguymadmax
  • Remove empty ParentIndexNumber workaround [PR #13611], by @Shadowghost
  • Update dependency z440.atl.core to 6.20.0 [PR #13845], by @Shadowghost

Jellyfin Web 10.10.7

General Changes

  • Fix parsing minor version of Tizen [PR #6661], by @dmitrylyzo
  • Fix re-focusing on pause button when displaying OSD [PR #6510], by @dmitrylyzo
  • Fix skip button not displaying correctly with OSD [PR #6583], by @rlauuzo
  • Fix catalog plugin page not setting page title [PR #6570], by @nielsvanvelzen
top 50 comments
sorted by: hot top controversial new old
[–] Supernova1051@sh.itjust.works 2 points 3 days ago

So I upgraded and tested not adding a trusted proxy (using Traefik in front of Jellyfin) and nothing broke. Was it supposed to break or is it just that its insecure? Am I less secure by not adding it as a trusted proxy?

[–] renegadespork@lemmy.jelliefrontier.net 74 points 1 week ago (3 children)

Configurations behind a reverse proxy that did not explicitly configure trusted proxies will not work after this release. This was never a supported configuration, so please ensure you correct your configuration before upgrading. See the updated docs here for more information.

Well I’m glad I read that before upgrading!

[–] sugar_in_your_tea@sh.itjust.works 31 points 1 week ago (7 children)

It's odd to throw that into a patch release. I guess we'll find out if I did it correctly.

[–] jonne@infosec.pub 9 points 1 week ago (1 children)

I mean, it's patching a security issue caused by trusting headers it shouldn't, so I don't think they should wait for a big number release.

[–] sugar_in_your_tea@sh.itjust.works 16 points 1 week ago (1 children)

Why wait? Just release it as a big number release. The version number doesn't define the size or cadence of a release, it just says whether there's a breaking change.

[–] mac@lemm.ee 7 points 1 week ago* (last edited 1 week ago) (4 children)

At least in my org we use semantic versioning ( Major.Minor.patch) where patch must either be a new feature, a fix, or something that is backwards compatible

Minor can be breaking

Major is basically something you're proud of lol

load more comments (4 replies)
load more comments (6 replies)
[–] 486@lemmy.world 20 points 1 week ago* (last edited 1 week ago) (2 children)

Thanks for pointing this out! I probably would have missed this, since I didn't expect such a change for a patch release.

Their documentation mentions:

For jellyfin to know which reverse proxy is trusted, the IP, Hostname or Subnet has to be set in the Known Proxies (under Admin Dashboard -> Networking) setting.

Does this really mean, that the only way to configure this is through the web UI? This is kind of a problem when deploying it, since without the reverse proxy I can't reach the Jellyfin server. Is there no way of doing this outside the web UI, via a config file or something?

Edit: Apparently the configuration for the proxies is stored in Jellyfin's network.xml config file. So it should be possible to do this without manually configuring it via the web UI.

Another edit: It works. Adding <KnownProxies>[proxy ip or hostname]</KnownProxies> in place of the empty <KnownProxies/> key to that config file does the trick.

[–] jagged_circle@feddit.nl 3 points 1 week ago

Yeah the lack of info in the docs on how to configure jellyfin in the CLI is pathetic

[–] Lem453@lemmy.ca 2 points 1 week ago* (last edited 1 week ago) (2 children)

If I run traefik and jellyfin in docker, do I add the docker IP of traefik as the trusted proxy?

[–] klopstock@feddit.org 2 points 1 week ago

I think you can use the container name if both containers are in the same docker network

load more comments (1 replies)
[–] slazer2au@lemmy.world 2 points 1 week ago (1 children)

Do you not normally read patch notes before patching?

[–] kata1yst@sh.itjust.works 18 points 1 week ago (1 children)

Fuck no, ain't nobody got time for that! My self hosted stack has 40+ services. I lock them to minor releases (where semvers are used), deploy blind with automation, and fire alerts when breakages occur, which is thankfully rarely.

What you're suggesting works for small, very carefully curated environments. I grew past that years ago and doubly so when I had kids.

[–] slazer2au@lemmy.world 4 points 1 week ago (1 children)

40? Kinda curious what you are running now.

[–] kata1yst@sh.itjust.works 8 points 1 week ago* (last edited 1 week ago) (21 children)

The general list:

  1. Immich
  2. Jellyfin
  3. Plex (deprecated but kept around for my plexpass using friends)
  4. Internet Radio (custom container)
  5. PBS kids downloader (custom container)
  6. Lidarr
  7. Sonarr
  8. Mylar
  9. Radar
  10. Prowlarr
  11. Open-Webui
  12. QBittorrent
  13. Sabnzbd
  14. Navidrome
  15. Synapse
  16. Element
  17. Forgejo
  18. Tdarr
  19. Calibre
  20. Calibre Web
  21. Tautulli
  22. Bazarr
  23. Syncthing
  24. LazyLibrarian
  25. Linkwarden
  26. Mealie
  27. GlueTun
  28. Kopia
  29. Home Assistant
  30. Music Assistant
  31. Blocky
  32. FoundryVTT
  33. Wireguard
  34. ArchiveTeam Warrior
  35. Traefik
  36. Docspell
  37. Birdcage (though I'm slowly replacing this with my own bird sound server)
  38. Frigate
  39. FreshRSS
  40. Ntfy
  41. Samba
  42. SearxNG
  43. CouchDB for Obsidian Self-Hosted LiveSync

With all the supporting services:

Server:
 Containers: 76
  Running: 74
  Paused: 0
  Stopped: 2
 Images: 92
[–] gccalvin@lemmy.world 3 points 1 week ago (1 children)

Could you please explain your use case for Music Assistant if you already have Jellyfin/Plex and Navidrome?

[–] kata1yst@sh.itjust.works 8 points 1 week ago (3 children)

Certainly!

Jellyfin I use for video content. I find its music functions lackluster.

Navidrome I use (and my family uses) for personal listening.

Music around the house, like on one or more of my casting capable speakers / tvs I use Music Assistant. Also let's me do automations easily, and doesn't tie up an android phones media's output. Struggled with earbuds while casting taking over audio for too long before deploying Music Assistant!

[–] gccalvin@lemmy.world 2 points 1 week ago (1 children)

Thanks! I thought most people don't use navidrome if they have multiple users because they can't create user-specific playlists. Is this not the case? What music features do you find limiting on Jellyfin? Also, how did you get your family to switch off music streaming for your navidrome server?

load more comments (1 replies)
load more comments (2 replies)
[–] soulofdragnsfire@sh.itjust.works 2 points 1 week ago (5 children)

What's your hardware solution for that? I've reached the limit of my configuration and may need to look into more robust hardware (or moving things like jellyfin off to a dedicated machine)

[–] kata1yst@sh.itjust.works 2 points 1 week ago* (last edited 1 week ago)

It's old but fairly beefy. Most of the RAM is reserved for ZFS reads, but in reality theres tons of headroom.

CPU: 2x E5-2630L v2

Motherboard: Intel S2600CP

RAM: 16x8GB DDR3 1333 ECC

Disk:

  • 1x 500GB SSD OS
  • 1x 500GB SSD ZFS cache (L2ARC)
  • 45TB ZFS Mirror+Stripe pool (various sizes, 8 disks)

I'll probably be moving this to a cluster of mini computers whenever prices look right, just for power efficiency.

Minus the storage the box cost me about $600, mostly in RAM. The CPUs were like $20 each, the mobo was about $150, etc

load more comments (4 replies)
load more comments (19 replies)
[–] node815@lemmy.world 26 points 1 week ago (3 children)

Not related to the server, but I was very happily surprised with the latest Roku Jellyfin channel. A complete refresh of everything and it's great to see it.

[–] gazby@lemmy.dbzer0.com 22 points 1 week ago (1 children)

You'll want to get off Roku soon, they're already testing preroll ads for the home screen.

[–] node815@lemmy.world 10 points 1 week ago (3 children)

I can see them doing that, I use a DNS ad-block (Adguardhome) with plenty of filters and last night, I spotted that they were able to inject two ads (standard one to the right of the channels and one at the bottom below the menu for the new Minecraft movie when they changed my background. So, they are finding ways around this stuff. I simply disabled the Sponsored themes. We are on the fence about replacing the TV later this year but not 100% sure just yet. It's been quite buggy randomly rebooting when switching sources and other things.

[–] gazby@lemmy.dbzer0.com 9 points 1 week ago (1 children)

FWIW AndroidTV is getting worse all the time also 😭 The only assurance we have is that the TV isn't connected and AndroidTV is in a separate box.

[–] Squizzy@lemmy.world 2 points 1 week ago (1 children)

In what way is it getting worse? I was hoping to move and use some patched apps and foss apps, is that being restricted?

load more comments (1 replies)
[–] sugar_in_your_tea@sh.itjust.works 4 points 1 week ago* (last edited 1 week ago) (1 children)

)

You dropped this. 😀

Back on topic, anyone have a rec for an alternative? I basically just need Netflix and Jellyfin, and hopefully I won't need Netflix soon (my SO keeps finding NF originals they must watch). I to use a regular remote, but AFAIK nothing provides a nice UX for Netflix w/ remote outside the official app.

I absolutely prefer something FOSS.

[–] AtariDump@lemmy.world 3 points 1 week ago (3 children)

Minus Netflix? Kodi.

With Netflix? You’re not finding anything 100% FOSS.

load more comments (3 replies)

Why aren't you just using Kodi?

[–] timbuck2themoon@sh.itjust.works 7 points 1 week ago (1 children)

For real. JF roku team is killing it. Latest release is so nice.

[–] 1hitsong@lemmy.ml 8 points 1 week ago

🤘 Thanks

[–] 1hitsong@lemmy.ml 6 points 1 week ago
[–] melfie@lemmings.world 10 points 1 week ago (3 children)

Really looking forward to 10.11 when the EFCore functionality is in place so I can run it with PostgreSQL and actually backup the DB properly and also have proper replication for a hot standby.

[–] retmas@lemm.ee 4 points 1 week ago (1 children)

As far as I can understand, even with EFCore in 10.11, there still will only sqlite be available as a database backend. There are plans for postgresql and other types but it's a much more distant prospect. Reference

load more comments (1 replies)
[–] wabasso@lemmy.ca 3 points 1 week ago (2 children)

If you have the time, I’d love to learn how to set up a hot standby, not just for jellyfin but in general.

load more comments (2 replies)
[–] chaospatterns@lemmy.world 2 points 1 week ago (1 children)

Oh that would be nice. I would use that to just go into the database and fix all my broken music metadata which I can't see to fix any other way.

load more comments (1 replies)
[–] hperrin@lemmy.ca 7 points 1 week ago (2 children)

My friend who’s been praising Plex for years and making fun of me for using Jellyfin instead just told me the other day he’s thinking about switching. It’s their new subscription fee that finally did it. xD

[–] LordKitsuna@lemmy.world 1 points 6 days ago* (last edited 6 days ago)

I mean i understand praising it, i still primarily use plex despite their Shenanigans and will VPN to bypass the remote streaming charge. I still have jellyfin installed but it has several issues for me still.

I have quite a large library and I still regularly have issues with matching especially on anime. It will either fail to match at all until I do it manually, or match incorrectly and I will have to manually correct it. I still frequently have playback issues for no apparent reason especially on Android where I will hit a file that just refuses to play back for no apparent reason with none of the error logs being particularly helpful on files that play perfectly in Plex with absolutely no issues, I have also been affected by the memory leak problem that has plagued many a jellyfin user. Where even if you'd simply turn the server on and never play any files it just randomly keeps growing in size more and more and more over time until the server hits oom even on a server with 128GB. This has been reported by so many users but the developers just seem uninterested in tracking it down. I have both friends and family that use my server and the device support is basically everything even remotely capable of media playback for Plex but is unfortunately just not as robust for jellyfin.

I know that in this particular subreddit I'm likely to just get downloaded for saying it but sometimes the open source solution just isn't as good and this is definitely one of those cases. It's been getting better has time goes on but it's not a solid replacement yet for a lot of cases

[–] kcweller@feddit.nl 6 points 1 week ago (1 children)

It's what made me switch this weekend. I didn't know I missed the "Episode ends on (time)" functionality until I got it with Jellyfin, Holy shit that's so nice ❤️

load more comments (1 replies)
load more comments