• 0 Posts
  • 754 Comments
Joined 1 year ago
cake
Cake day: July 31st, 2025

help-circle






  • Measure the screw holes and check them against other ears. They might be a fairly common pattern.

    Also make sure that the ears will properly support the weight of the UPS. Lead-acid batteries are hefty. I can’t tell from a quick search how it’s supposed to be set up. It might need ears front and back. Or, you might find full rails.

    If all else fails, get a rack shelf and just let it sit on it. Or get some scrap wood and/or steel and fabricate something.



  • You don’t need an external domain. Use .internal as your tld and you can use whatever domain your want. jellyfin.homelab.internal, for example.

    I own a domain and run my internal stuff under internal records. Part of the reason for doing it this way is I can use the DNS challenge for issuing LE certs to the internal services automatically.

    And no a reverse proxy will not expose anything to the Internet, unless you also open the port in your firewall (and forward it in NAT if it’s on the lan and you use NAT).





  • frongt@lemmy.ziptoSelfhosted@lemmy.worldWays to Expose Services Publicly
    link
    fedilink
    English
    arrow-up
    0
    arrow-down
    1
    ·
    27 days ago

    That first page says exposing it to the Internet is “not recommended”. Putting a reverse proxy in front of it does not meaningfully change the security posture. A malicious request to http://jellyfin.homelab.com/exploitable-page will be sent to jellyfin in effectively the same way, whether through a reverse proxy or not. You would need a WAF set up specifically to look for relevant exploit attempts.

    https://github.com/jellyfin/jellyfin/issues/5415

    Those are some outstanding known vulnerabilities, most of them unfixed. They are not particularly severe, but it shows that thorough security is not a priority for the jellyfin devs.