• 0 Posts
  • 8 Comments
Joined 1 year ago
cake
Cake day: December 7th, 2023

help-circle


  • You should not be using NAT to access your Plex externally, I will explain.

    App.plex.tv and the apps use Plex services to generate a point to point connection from remote clients through your router to the server. This is important because you never need to expose a private IP to the Internet, and the authentication can be protected with something robust like a Google account which support 2FA and even phishing-resistant 2FA.

    The combination of more advanced security and secure/convenient SSO authentication are one of the biggest benefits of Plex in my opinion.


  • Wasn’t it ARM doing the licensing shenanigans here? I’ve got no real skin in the game for either, but companies with IP to license seem to have become a commodity, and price themselves out of practicality. For that reason I tend to like when they lose their battles. On this one specifically, I was hoping for Qualcomm to win, but only because they’re cranking out these incredible laptop processors, showing Intel what a windows laptop on ARM can be - fast, cool, all day battery.




  • Lots of great ideas in this thread. It sounds like you prefer Jellyfin, but I always encourage people to consider Plex. Plex is excellent, and even if you prefer the features or interface of Jellyfin, you should never expose any application (Plex, Jellyfin, or otherwise) directly to the Internet. This should be non-negotiable. Plex uniquely solves for external access with the mobile/desktop apps and app.plex.tv by brokering client connections into your network without a NAT/PAT on your router or firewall. Plex also supports Google logins, which means that you can now have 2fa and potentially phishing-resistant 2fa if you secure your Google account with a passkey.

    At my company we only expose our applications behind a WAF and firewall, and I see that some folks here have recommended Cloudflare. For those who may not know, it is no longer enough to simply rely on a firewall. When your application is built with components that may become vulnerable over time, it’s critical to use a WAF.