Jellyfin 12.0 (jellyfin.org)

382 points by 0xC0ncord 9 hours ago

doctoboggan 8 hours ago

As a long time plex user with a lifetime pass, I always enjoy seeing the good progress with Jellyfin as it will increasingly give me a soft landing for when Plex finally does something to make me move. At the very least it will hopefully keep some of plex’s most user hostile behavior in check.

As an aside, I recently started having Claude help me with configuring my *arr stack and it has helped tremendously. I used to have to babysit and manually intervene on maybe 10% of requests, now it’s near zero, plus I got audiobook requests and subtitles working great. Granted a big part of the increased success was signing up for a Usenet service but of course Claude was able to configure it all and make it work. I was a little worried Claude would demur in the face of the task, but it was more than happy to help me acquire media in this way

atombender 2 hours ago

I left Plex for Jellyfin + Infuse a couple of years ago, and I'm not looking back.

But the sore point right now is outside access, which Jellyfin really isn't made for. I set up Tailscale so I can connect Infuse to Jellyfin remotely. But that's not exactly as smooth as Plex. I can't give friends and family access, either, which was dead easy with Plex.

In terms of the UX, Infuse isn't very good, but it does the job okay. The built-in subtitle fetcher is amazing; that stuff never worked for me with Plex.

y-curious 21 minutes ago

For people that don’t know, Infuse lets you use Jellyfin on Apple TV and it’s very helpful for day purpose

leokennis 3 hours ago

Both for simplicity and portability, I am a very happy user of https://firecore.com/infuse.

I guess it's less full featured as Plex or Jellyfin (it still more than covers the bases for video: format support, different video/audio/subtitle tracks, tv series recognition, skip intros, Trakt.tv etc.); but then again all it requires is any online storage, and the Infuse app (either on iDevice or AppleTV).

vulkoingim 3 hours ago

Yeaah, second that! I use it on the AppleTV and across the rest of my devices! Works like a charm, and coupled with Tailscale I can access everything on my Nas everywhere :) I have it configured to use Jellyfin as the source, runing on said nas

prophesi 4 hours ago

Lifetime pass user long before the ridiculous price hikes for it and the direction for the service going down a path I didn't want to support. You can run Plex and Jellyfin on the same server concurrently pointing to the same media files. My Plex server was still running until I was able to transfer everything over and their mobile app ecosystem got up to parity.

firecall 8 hours ago

Feels like only a matter of time with Plex doesn't it!

I've got the lifetime pass, but it really does feel like a Sword of Damocles situation...

heed 2 minutes ago

[delayed]

doctoboggan 8 hours ago

Yes it really does, and I intend to switch eventually but from what I heard the last time I looked into it, the end user clients are a big area where plex still beats Jellyfin. Since that’s where my non technical friends and family mostly interact with the system, it’s the area I need to be the most polished and hands off.

c0nsumer 8 hours ago

BLKNSLVR 8 hours ago

egeozcan 8 hours ago

al_borland 6 hours ago

mzi 6 hours ago

I have a lifetime pass as well, but switched to Jellyfin years ago.

madeofpalk 2 hours ago

Maybe I'm naive, but I feel like if Plex was going to do anything to existing lifetime subscriptions, they would have done it by now. I think we're fine for now.

senectus1 7 hours ago

really is just the normies access to it via samsung and LG TV's that hold me back.

notrealyme123 5 hours ago

ThomasBb 6 hours ago

jwr an hour ago

I also have a lifetime pass, but I'm becoming increasingly annoyed with Plex. Why do I have to regularly turn off their "recommended" stuff that is just ads for movies I can buy online? Why does it appear and re-appear?

Also, the Plex app for LG TV has been buggy and broken for years: some content will not play at all, some will not play if you ff/rewind, and some will not play until you physically turn your TV off and then on. Very annoying.

I'm glad to see competition.

darknavi 8 hours ago

> As an aside, I recently started having Claude help me with configuring my *arr stack and it has helped tremendously. I used to have to babysit and manually intervene on maybe 10% of requests, now it’s near zero

Any more details here? I hit this a lot and it's not too much work, but still pretty annoying.

doctoboggan 8 hours ago

Step one is to just let Claude have ssh access to the machine you run plex from and let him do a full sweep. I had some conflicting profile rules and was not properly blocking malware and not properly marking failures so they were never retried. This fixed a big portion of the manual work needed, but the usenet account is really what got me to nearly 100% hands off. I think I am paying $3/month for the next fifteen months, and apparently if I pay attention during Black Friday there will be some pretty cheap deals. For more months of access at even less

EDIT: Claude was also able to look at my logs and noticed that nearly all of the exe or other malware was coming from 2 trackers so we just eliminated those.

tired_star_nrg 7 hours ago

gotbeans 6 hours ago

I have had claude do the same, plus reorder nfs mounts, share templates, and do some init-container magic to start vpn/gluetun with port-forwarding, all in a k8s cluster. It's become so easy to manage and debug.

internet101010 5 hours ago

If there is one thing that needs to be re-written and consolidated it is the arrs ecosystem. Replacing/consolidating the arrs themselves is pretty straightforward. The trap that quickly becomes a token incinerator is incorporating the downloader into the library manager itself. A lot of learned lessons in that sabnzbd codebase.

davidwritesbugs 3 hours ago

As someone with coding projects in the is area would you care to elaborate on "a lot of learned lessons"?

SSLy an hour ago

devindotcom 8 hours ago

unrelated to your otherwise helpful comment, I just wanted to note that it is "demur" (i.e. hesitate or object) you want in this case; "demure" is an adjective meaning shy or modest.

doctoboggan 7 hours ago

Thanks, fixed

bombcar 8 hours ago

Claude and jellyfin and HASS is great. Now my phone has a “door lock” which turns off the kids user’s access, but lets the current playing finish. And another “door lock” unlocks playing for ten minutes.

y-curious 19 minutes ago

What do you mean by door lock, where does the code show up?

dgrin91 8 hours ago

What are you using for audiobook requests? I also recently setup arr stack, but I saw readarr is depreciated and there doesn't seem to be a clear successor.

doctoboggan 7 hours ago

After reading a lot of reddit threads I settled on ReadMeABook[0] and it has been working great so far. One pretty cool feature is that it lets you connect an LLM API key and then you can have it make requests based on your library. I now have Fable 5.1 suggesting my next book.

[0]: https://github.com/kikootwo/readmeabook

y-curious 18 minutes ago

SkepticMystic 5 hours ago

Chaptarr is great! Just had their public release after a long alpha testing phase

kombine 5 hours ago

Xerox9213 7 hours ago

It’s been a while since I used it but lazylibrarian has worked for me in the past.

I tried shelfarr as well with some success a while back, but haven’t needed any new books lately since I’m busy catching up on the books I’ve downloaded (the Bible is long lol).

davkan 6 hours ago

If you don’t want to commit to one of the vibecoded no community arr clones for books then i recommend shelfmark. Lightweight grabber, easy to start with, easy to rip out later.

jshier 6 hours ago

Also a lifetime pass Plex user, I'll leave as soon as someone has a good solution for identifying raw Bluray rips automatically. Why do I have to manually name the episodes? We had CDDB last century, why isn't there an equivalent for raw video rips? The ripped data should be identical, a simple hash should uniquely identify it.

0points 5 hours ago

Are you describing a plex feature? I was under the impression they required the media to follow certain naming conventions. [1]

Maybe mkv-renamer is of use to you? [2]

1: https://support.plex.tv/articles/naming-and-organizing-your-...

2: https://github.com/ssanj/mkv-renamer

jshier 4 hours ago

BLKNSLVR 8 hours ago

I just like the confirmation that AI is happy to be a Boatswain.

post-it 6 hours ago

Claude is perfectly happy to do it and gives great suggestions. I can't imagine it will last, I did run into one situation where I wanted to archive all the media on a subscription site before my subscription expired, and it refused. But splitting it into one session to collect all URLs and a second session to plug them into yt-dlp with the right arguments worked just fine.

villish 8 hours ago

I like them both, but I can never give up plexamp. I’ve tried navidrome and various jellyfin clients but I keep going back.

bigstrat2003 6 hours ago

For music, I use Navidrome + Symfonium. Not quite as smooth as Plexamp was (and there's nothing on par with Symfonium on desktop), but I disliked having my music and video commingled so it's been worthwhile for me.

ggm 5 hours ago

Thank you for starting this thread. Another lifetime plex pass user, interested in my choices. For now, I am happy on plex/plexamp. Good to know what jellyfin is at.

bitexploder 7 hours ago

For what it’s worth, I am very happy with Jellyfin and the *arr suite. It took a bit of agent prodding to get them all playing nicely together and bypassing Cloudflare CAPTCHAs. However, it's pretty sweet when you get it all working.

scubbo 6 hours ago

> bypassing Cloudflare CAPTCHAs

Can you say more about this? I've never encountered this problem in nearly a decade of running the same stack.

alacritas0 6 hours ago

bigstrat2003 8 hours ago

I (also a lifetime Plex Pass user) decided to try it out ~6 months ago, and I've switched over. I haven't had any gaps in functionality yet, though YMMV of course. While it isn't better than Plex (which is still fine for now), it isn't worse either, and I trust the Jellyfin devs a lot more than the Plex devs at this point.

VladVladikoff 8 hours ago

I switched to jellyfin about 6 months ago and I can say it is definitely worse. I’m constantly fighting to fix thumbnails, fix episodes to be in the same show, force rescans to get it to even recognize a show that already exists. I never had any of these problems with plex. Plex also defaults to transcoding which fixes a lot of gaps with clients that don’t support certain codecs. I’m often running into issues where infuse can’t play DTS so I need to reencode before I can play the movies.

Also in the process of ditching plex I switched to audiobookshelf for my audiobooks and I have to say it’s also crap. It’s constantly refusing to start playing, or pausing for a really long time before playing.

All that being said I’m not switching back. It’s been a pain but it was worth it.

xbmcuser 7 hours ago

Marsymars 4 hours ago

sandcat_ 8 hours ago

Hikikomori 3 hours ago

bigstrat2003 7 hours ago

RajT88 8 hours ago

I must be old school. I never got on board with Plex, because my "lifetime" licenses for PlayOn, TVersity and Twonky all ended up completely useless. Yes, those licenses still work, but you can't get the latest versions which provide support for the latest codecs, features, etc. There's a cutoff on the versions that "lifetime" license allows you to upgrade to, and some of those licenses were not that cheap at the time.

So of course, Plex is going to engage in the fuckery that they are. JellyFin on the other hand, for the amount it costs is surprisingly low on janky behavior.

BeetleB 8 hours ago

colechristensen 2 hours ago

huh, yeah I should start an xbmc fork/reimagining. the limitations with the tools of the day are imagination. a LOT of the software I use these days are things I facilitated the creation of and a media player is definitely supposed to be on that list

bhaney 8 hours ago

Upgrade experiences, anyone?

I have a ~40TB library and was still on 10.10.7 because of all the performance issues with 10.11. Upgraded straight to 12.0 and was impressed with how quick and painless it was! As the upgrade instructions warn about, some of my titles disappeared until a rescan added them back, but that was the only weirdness. The whole initial migration only took a few minutes.

s_dev 2 hours ago

Went from 10.11 to 12.0 and had zero issues. Scaleway/Ubuntu/Docker env with 8GB RAM.

Well one small niggle, I had a custom script setup on Caddy that overrides how certain buckets are sorted because my users are too lazy to follow my instructions. They changed the BucketID string in some way but this more to do with me having a custom script dependant on something they don't guarantee.

Hopefully they allow admins to change a users preferences in the future but currently it has to be done at the user level. I'm sure that will be in a future update.

dust-jacket 27 minutes ago

if you're running on scaleway, can I ask what you're doing for media storage? scaleway block storage?

sippeangelo 3 hours ago

I wrongly assumed I was below version 10.10.7 and tried to "upgrade" to it first as the migration guide said, but this completely blew up and the db migrations failed. I then tried to skip straight to 12 and that also crashed on startup during db migrations, so I just nuked the whole Jellyfin config and started from scratch.

Bit unfortunate how this can even happen, but it's on me for not checking or taking a backup first. The config/db really contain anything important anyways, other than "watched" markers that are already out of sync for me across Emby/Jellyfin/Plex.

suprjami 2 hours ago

Updated the rootless podman container and restarted, worked fine.

amiga386 7 hours ago

Same here, though my migration took about 10 minutes, and the rescan took about 30 minutes. It also had a few minutes of generating trickplay images, though it must have just been filling in gaps, because generating trickplay images for a large library takes days.

Hikikomori 3 hours ago

Just pulled latest container and it just worked as far as I can tell.

noisy_boy 8 hours ago

Subtitles are the Achilles heel of Jellyfin (at least the Android client sending the stream to Chromecast stick connected to the TV). I can see the subtitle present but it doesn't show on the movie. Ok, I will just add manually - can't, progress indicator loops forever. Ok, I will remove the existing subtitles and add - removal succeeds - addition fails. This is the same fiddling everytime. If it works, it is a miracle. I used to forget about the subtitles and start the movie - you could just fix it on the fly right?! Nope, now I do full prep before calling everyone that the movie is good to go.

This is not coming from a bad place - I am very appreciative of having a open source alternative to Plex. Just putting this out there in case it catches someone's interest to improve it.

drdexebtjl 7 hours ago

I had this problem, but I fixed it by setting it up so it extracts all embedded subtitles into SRT files, and enabled a setting prevents Jellyfin from serving embedded subtitles.

From what I remember, some clients don't support streaming subtitles, so they must download them completely in advance, when the movie starts, before they start appearing. If you pick embedded subtitles with these clients, Jellyfin must extract the subtitles files immediately, and this takes a while depending on container format, file sizes and server load. External subtitles are faster.

Retr0id 6 hours ago

Could you elaborate on how you set it up to extract the embedded subtitles?

embedding-shape 2 hours ago

drdexebtjl 6 hours ago

thaumasiotes 7 hours ago

> If you pick embedded subtitles with these clients, Jellyfin must extract the subtitles files immediately, and this takes a while depending on container format, file sizes and server load.

Really? How?

My expectation would be that extracting a subtitle file takes a few seconds at most. If you had to do it on the fly every time you watched anything in your library, it wouldn't matter.

drdexebtjl 6 hours ago

thunderfork 5 hours ago

s1n_ 6 hours ago

Do you use bazarr? That’s been the final fix for me with subtitles

aidenn0 8 hours ago

FWIW, Moonfin and Infuse both work flawlessly on an AppleTV.

I also remember Google TV working fine, but it seemed like ads got added to another part of the UI every month so I got sick of it.

Roku only supports text subtitles, so if you have picture subtitles (like a DVD or bluray), then you'll need to burn them in if you want to play on Roku.

patrickk 3 hours ago

The default jellyfin client works great also on my NVIDIA shield.

Young children and non technical adults can use it as easily as any streaming app. I guess you can tweak and theme it endlessly to look like your favourite streaming app but I haven’t felt the need to so far.

Self-hosting always involves a bit of jankiness, if you can’t handle that then back to overpriced subscriptions and spyware you go.

Cyph0n 7 hours ago

SenPlayer is also very good on ATV.

trog 8 hours ago

Is that an old problem, or a problem that is still in this new v12?

crazybonkersai 20 minutes ago

Coming from Plex, I gave Jellyfin a try, but returned back to Plex after several months. My biggest gripes were poor subtitle support and inability to differintiate TV shows from movies stored in the same folder. Does this version improve these issues?

hi_hi 6 hours ago

I love jellyfin, been using it for years now, alongside the *ARR stack.

My young daughter recently started getting into audio books, so I installed Listenarr alongside a vibe coded mcp server [0] which I have running with all the other arr service mcp connections.

This allows the family to easily download and manage their media (err…Linux distributions) via Onyx AI, which I also have running with everything else on local box running microK8s, all on a relatively puny Geekom minipc with 16Gb

This whole setup is pretty straightforward to manage with Claude which has no issues working with K8s.

For those interested in the listenarr audiobook mcp: [0] https://github.com/leachuk/listenarr-mcp/blob/main/CLAUDE.md

amiga386 8 hours ago

I had to go back from 10.11.x to 10.10.7 because the performance was bad, but I'm very confident they've fixed all the performance problems with this 12.0 release.

I'm also confident they've found most of the bugs and have produced something you can just upgrade to, given they've had 7 release candidates over the past few months:

   12.0 RC1 - Jun 22
   12.0 RC2 - Jun 28
   12.0 RC3 - Jul 22
   12.0 RC4 - Aug 02
   12.0 RC5 - Aug 11
   12.0 RC6 - Aug 26
   12.0 RC7 - Sep 01
   12.0     - Sep 08
Overall it looks like a lot of solid testing has gone into this, I shouldn't have to go back to 10.10 again.

UPDATE: Upgraded to 12.0, performance is great, better than 10.10 and 10.11, including in third party apps! No problems with the migration.

rcarmo 4 hours ago

I have a trifling complaint about this, which is that it smacks of LLM aid throughout, especially in headings. I wish people would aggressively filter for these things--I have a technical writing SKILL.md that tries to remove all the AI tropes it finds and use simplified technical English (it's a thing, look it up) to do docs, and that makes one heck of a difference...

davidwritesbugs 2 hours ago

tym0 2 hours ago

As other have said the apps for devices is still the issue with Jellyfin.

For TV you pretty much have to use Kodi and all the decent theme require a surprising amount of other plug-ins to work...

Anyone know of a decent theme for Kodi that won't fall over next time it updates? I just need "Resume Watching", "Newly Added" and alphabetical lists.

l3000 2 hours ago

Moonfin?

zhivota 8 hours ago

Jellyfin works great for me. My only gripe is logging around library scanning being pretty difficult to interpret. I'd love to add a dedicated scanner log that focuses only on logs relating to scanning, which for me tends to be the trouble spot in these systems.

That said I very rarely would even need it, the last time I thought I did was when I had my under configured to not see R rated movies because of my kids, the logs were not clear that the movie was ever scanned so it was hard to realize.

MyelinatedT an hour ago

Literally last night I was trying to set up books in Jellyfin and dismayed to see the bookshelf plugin archived with no mention of ongoing support.

Very happy to see it’s been folded into the server!

smoked-egg an hour ago

Something I've long wanted is something far more minimal than jellyfin that just browses my library by folder but has a web player that can transcode/remux as needed for the browser. As it stands when I want to watch a film with someone elses computer I give VLC/whatever a link to a webdav URL and it streams from that. It'd just be nice to have it be in the browser.

praveer13 7 hours ago

I have a plex pass but moved to jellyfin, because I can't get plex to reliably stream from my server at all. While jellyfin works so smoothly. Look forward to this update!

ndom91 an hour ago

Upgrade from 10.11.11 was also successful here - only took 2-3 minutes. Can definitely notice the performance improvement

anygivnthursday 3 hours ago

Jellyfin has worked great so far for us, I never used Plex or Emby so cant compare. They recently made an official Tizen app too, so dont have to build and sideload anymore, just works.

One of the remaining issues is that the Samsung client remuxes if you select a secondary audio track[0] - apparently fixable by using the AVPlay player instead of the HTML player.

[0]: https://github.com/jellyfin/jellyfin-tizen/issues/337

warpspin an hour ago

How does it compare to current Plex? Are there proper, usable apps for Apple TV and iOS already?

Edit: Anyone is running Jellyfin on Qnap?

lode an hour ago

I recently switched from Plex's pretty terrible native players to Plezy (on iOS, iPadOS and tvOS).

Plezy supports both Plex and Jellyfin as a backend - I'm not sure if there is 100% feature parity.

warpspin an hour ago

Thanks, definitely will try that one.

ErrorNoBrain an hour ago

Not sure if there is for Apple TV

but they have an iOS app for ipad/iphone https://apps.apple.com/us/app/jellyfin-mobile/id1480192618

porjo 16 minutes ago

Swiftfin, Moonfin are two Jellyfin clients for Apple TV.

stanac 3 hours ago

Not sure if they support multiple OPDS catalogs now.

I am on v10 (using JF for music only) and with book plugin (forgot which one) it didn't offer to split books into multiple catalogs, which was a bit annoying. Maybe I missed it in v11. Solution for me was to vibecode a simplest OPDS server with 0 css and basic auth.

getcrunk 5 hours ago

Did they fix that thing where like you can’t have mixed movies and tv in the same folder without it going nuts

mock-possum 5 hours ago

How would jellyfin be able to tell whether the video files in a directory are movies or tv? What does going nuts actually look like, and what causes it?

sfRattan an hour ago

Not OP, but I've run into similar instances of Jellyfin "going nuts."

Mixed media type libraries are depreciated and "broken" according to the documentation[1], which is fair enough, but sometimes this results in weirdness if a TV-show is also part of a franchise and has associated TV-movies (e.g. the Battlestar Galactica reboot, Futurama, or Breaking Bad). If you want to keep those movies on your file system in a folder with the other stuff from the franchise, Jellyfin often can't handle it. And it's not obvious to new users whether these TV-movies belong in a TV-shows library or a movies library.

I've also noticed it cannot handle additional layers of folders (i.e. for Genres) in TV show libraries, but it can handle that layer in movie libraries. Failure mode (the "going nuts") looks like those genre folders recognized as bizarre or obscure television shows, and nothing scanned the next layer down.

I haven't looked into how their scanning algorithms work, but it's definitely frustrating that there's not a button or feature to say: "No, Jellyfin, this is a folder, not a show or movie. Try scanning again on the subtree starting here."

Honestly, any software that either silently/automatically reorganizes a user's files and folders (not Jellyfin, but there are others that do this... even FOSS projects) or demands a specific meta-hierarchy on the file system is frustrating to anyone who deliberately keeps their files and folders well-organized.

[1]: https://jellyfin.org/docs/general/server/media/mixed-movies-...

ThomasBb 6 hours ago

Dow folks migrating frem Plex ; Codex/Sol had no issue transferring played/watched status to my new Jellyfin library.

gyomu 8 hours ago

The success of jellyfin in recent years has affected me in one unexpected way: I have a project whose .com domain name starts with jelly* and at some point I started getting so many signups from confused Jellyfin users who thought it was related.

(fortunately it’s a niche thing, so I just closed signups and just give my prospective users a one time invite code)

maxglute 3 hours ago

What's the situation on intro end ending detection and skipping?

Thev00d00 4 hours ago

Exciting times, they really messed up with 10.11.x shipped half baked DB refactoring

yunaflox 8 hours ago

Does this introduce basic UX changes, like saying that a media will be permanently lost instead of "will be removed from Jellyfin" which is inaccurate?

Edit: And making it more secure? Just because it is commonly for LAN doesn't mean it can be insecure

Mashimo 4 hours ago

> like saying that a media will be permanently lost instead of "will be removed from Jellyfin" which is inaccurate?

I don't know if that changed, but I gave jellyfin only read only access to my movies.

frez1 8 hours ago

i believe the maintainers stance is that jellyfin should not be exposed and it should always be behind a vpn

Mashimo 4 hours ago

I doubt that, how would that work? You would need to give all your friends a VPN login into your local network for all of their devices, including TVs.

mrheosuper 3 hours ago

alacritas0 6 hours ago

not necessarily always a VPN, but you can also use a reverse proxy like caddy or nginx where encryption and security are primary concerns instead of something non-essential like in jellyfin.

paddim8 4 hours ago

Their stance is actually that exposing it is fine

unsnap_biceps 7 hours ago

Frankly at this point, everything that is not explicitly fully public should be...

yunaflox 8 hours ago

Unfortunately, yeah.

RajT88 8 hours ago

Including, but not limited to, sending passwords in cleartext on login.

post-it 6 hours ago

As opposed to what? The password needs to reach the server. Encryption is the job of HTTPS.

izacus 3 hours ago

mvdtnz 6 hours ago

It sounds like a real pain in the ass upgrade, I'm thankful I've put off trying Jellyfin this long.

Mashimo 4 hours ago

Stop jellyfin, update containers, start container, start library scan?

Just like all the updates before that.

altano 8 hours ago

I hate people who are demanding of open source projects but... doing performance improvements and adding comic book support before making the product secure enough to expose to the internet is wild prioritization and I don't know what else to say.

Or release native clients that can use OIDC.

Doing neither sucks =[.

VladVladikoff 8 hours ago

Just use Tailscale. It’s always 1 day away from an 0-day anyway.

altano 8 hours ago

You can either require mesh vpn or make it easy for friends to access your library. You can't have both.

sgc 8 hours ago

thesh4d0w 7 hours ago

I've had my instance on the internet for years without issue. (Tailscale is great for me, but not feasible for family)

gloflo 3 hours ago

Sorry, but you are being one of those people there. Open source development lives on intrinsic motivation and community. If those things which you want, aren't things that motivate other to donate their free time to, you can implement them yourself, you can try throwing money at people to do it for you, you can take other unwanted chores from them to free their time, but you really ought not push negativity lime this.

nearlyepic 7 hours ago

What about it is insecure with regards to exposing it to the internet?

amiga386 7 hours ago

There's nothing wrong with exposing it to the internet.

There have been exploits: https://github.com/jellyfin/jellyfin/security

The project is a fork of another project (Emby) and there has always been potential for user-supplied data ending up in command-line arguments, or exploitation of the (admin) user getting to upload various files. Nonetheless, all reported security bugs have been fixed promptly, and they're proactively sweeping through the full set of APIs they inherited, looking for possible exploit paths.

Most exploits required an authenticated user.

If you're concerned about this, you should run Jellyfin's docker image, with read-only mounts of your media library, and only give accounts to people you trust, which is how you should treat your personal media library anyway.

altano 6 hours ago

https://github.com/jellyfin/jellyfin/issues/5415

A lot of Jellyfin's API doesn't require any authentication at all, as an example.

gloflo 4 hours ago

jaimex2 7 hours ago

I think they are confusing Jellyfin with the crazy exploits in Plex recently.