

To be totally honest I’m not sure you can harden jellyfin enough for public Internet exposure without also breaking basic functionality of the platform.
This is why everyone is always pushing so hard for a VPN/Tailnet of some kind. The public internet is a bit to much of a wild west to be exposing arbitrary services to it unless you really know what you’re doing.






This is interesting too, because in theory it would be in the best interest of cloudflare for that to be the general narrative. i.e “Look how many bots there are on the internet, you really need cloud flare” or however they’d advertise that.