2w ago

How do I host Jellyfin in the most secure manner possible?

Please take this discussion to this post: https://lemmy.ml/post/28376589

Show Context

99 comments

You don’t need a VPN for LAN connections.
ProtonVPN by default blocks LAN connections, and can only be changed using their paid tier.
- For that aspect, I would recommend changing to a provider that doesn't have such ridiculous restrictions.
  
  I kind of get it from Proton's POV. If they have a free tier that allows a limited number of devices they'll want to make sure you don't tunnel all you devices through that one.
  
  The only other providers I would use are Mullvad VPN or IVPN, both of which are paid.
  I agree it is ridiculous.
  
  Wait you're seriously using a free VPN?
  
  Being concerned about security while using free VPN sounds like an oxymoron.
  
  Is there any reason to think the free Proton VPN is somehow insecure?
  
  Not "insecure" in the sense that they're shoddy with their encryption, no. But being free could possibly mean their incentives are not necessarily aligned with that of the free users.
  In security speak, the CIA triad stands for Confidentiality, Integrity, and Availability. I'm not going to unduly impugn Proton VPN's credentials on data confidentiality and data integrity, but availability can be a legit security concern.
  For example, if push comes to shove and Proton VPN is hit with a DDoS attack, would free tier users be the first to be disconnected to free up capacity? Alternatively, suppose the price for IP transit shoots through the roof due to weird global economics and ProtonVPN has to throttle the free tier to 10 Mbps. All VPN operators share these possibilities, but however well-meaning Proton VPN and the non-profit behind them are, economic factors can force changes that aren't great for the free users.
  Now, the obv solution at such a time would be to then switch to being a paid customer. And that might be fine for lots of customers, if that ever comes to pass. But Murphy's Law makes it a habit that this scenario would play out when users are least able to prepare for it, possibly leading to some amount of unavailability.
  So yes, a holistic analysis of failure points is precisely what proper security calls for. Proton VPN free tier may very well be inappropriate. But whether it rises to a serious concern or just warrants an "FYI", that will vary based on individual circumstances.

99 comments