• 1 Post
  • 90 Comments
Joined 17 days ago
cake
Cake day: January 6th, 2026

help-circle

  • One way to go about the network security aspect:

    Make a separate LAN(optionally: VLAN) for your internals of hosted services. Separate from the one you use to access internet and use with your main computer. At start this LAN will probably only have two machines (three if you bring the NAS into the picture separately from JF)

    • The server running Jellyfin. Not connected to your main network or internet.

    • A “bastion host” which has at least two network interfaces: One connected outwards and one inwards. This is not a router (no IP forwarding) and should be separate from your main router. This is the bridge. Here you can run (optional) VPN gateway, SSH server. And also an HTTP reverse proxy to expose Jellyfin to outside world. If you have things on the inside that need to reach out (like package updates) you can have an HTTP forward proxy for that.

    When it’s just two machines you can connect them directly with LAN cable, when you have more you add a cheap network switch.

    If you don’t have enough hardware to split machines up like this you can do similar things with VMs on one box but that’s a lot of extra complexity for beginners and you probably have enough of new things to familiarize yourself with as it is. Separating physically instead of virtually is a lot simpler to understand and also more secure.

    I recommend firewalld for system firewall.


  • I think it depends a lot on what you are building.

    For bigger projects and apps leveraging the mobile platform I’m 100% with you.

    These kinds of frameworks can still be a good fit for a quick MVP demo, as a stepping stone for porting an existing web app, or if all you really want is a glorified web view (or are PWAs enough for the last one these days?)

    Specifically RN is in terrible shape and IMO something to avoid though.















  • Just to rule it out (wouldn’t be the case on default debian):

    Is SELinux enabled? sudo getenforce (if command missing or false, it’s not your problem here)

    You are not running with podman as compose backend? sudo systemctl status podman shouldn’t show an active service unless you use it.



  • kumi@feddit.onlinetoSelfhosted@lemmy.worldBentoPDF v1.16.0
    link
    fedilink
    English
    arrow-up
    4
    arrow-down
    3
    ·
    6 days ago

    It was certainly not intended as a character assessment and it’s unfortunate you took it that way. I’m talking about how the release notes (and in passing your post) were written and not about you as a person or maintainer, or even the project itself.

    I do hold release notes of a public project with thousands of users to a different standard than anon lemmy.world comments in a feedback thread. Is that interesting or surprising?

    I believe there was actionable feedback given. You are of course free to dismiss it.


  • kumi@feddit.onlinetoSelfhosted@lemmy.worldBentoPDF v1.16.0
    link
    fedilink
    English
    arrow-up
    4
    arrow-down
    3
    ·
    6 days ago

    Maybe I don’t understand the use case for bentopdf, and considering how popular it is, that is likely true

    Especially in this day and age, be careful with believing something is right (or even popular) just becuse it looks popular. Talking about generalities of gameable metrics and the cognitive pattern, not to dunk on the project apart from their communications doing the same mistake.