• 0 Posts
  • 22 Comments
Joined 2 years ago
cake
Cake day: June 9th, 2023

help-circle


  • I’d say it’s nearly as secure as

    basic authentication. If you restrict deletion to admin users and use role (or group) based auth to restrict that jellyfin admin ability to people with strong passwords in keycloak, i think you are good. Still the only risk is people could delete your media if an adminusers gmail is hacked.

    Will say it’s not as secure as restricting access to vpn, you could be brute forced. Frankly it would be preferable to set up rate limiting, but that was a bridge too far for me


  • I am using tailscale but I went a little further to let my family log in with their Gmail( they will not make any account for 1 million dollars)

    Tailscale funneled Jellyfin Keycloak (adminless)

    Private Tailscale Keycloak admin Postgres dB

    I hook up jellyfin to Keycloak (adminless) using the sso plugin. And hook Keycloak up (using the private instance) to use Google as an identity provider with a private app.
















  • Every web request costs someone money. If you aren’t paying them you are being provided a service. They’ve given you knowledge/ material in their possession free of charge. You are taking advantage of that good will by using the content for purposes not intended. That is a moral failing.

    To be clear the ownership of the material is not important, just the access is immoral, as the harm is already done.

    Ill add the caveat that it can be moral if they’ve specifically told you you can via the websites robot.txt file which websites of consequence all have. But the assumption has to be they don’t intend this because that is how consent works.