MaggiWuerze

https://github.com/jellyfin/jellyfin/issues/5415

The magic bullet in that sentence is VPN not reverse proxy

Doesn’t do shit when large parts of the Backend are not authenticated

After setting up an elaborate VPN scheme

Yeah, no way. Jellyfins Backend is like an open barn door. And with the kind of content most of us here offer through either Jellyfin or Plex, I wouldn’t want to open up like that.

Honestly yeah. The Jellyfin Backend is basically unauthenticated for a large part, allowing anyone to map and stream your content as soon as they guessed the ids, which isn’t that hard, since they are based on the paths on your device. So if your movie sits in /mnt/media/movies/the_bee_movie that is pretty esay to guess and calculate the id from, allowing anyone to stream that content from your server

External servers are shared with you, they can just check which owners have libraries shared with them. That’s not some nefarious logging, its information they need to offer that function

No, they are commenting on your grammar, or the lack thereof