FarraigePlaisteach

joined 1 year ago
[–] FarraigePlaisteach@lemmy.world 2 points 11 hours ago (1 children)

Thanks! Is the point of reverse-proxying your public-facing services to make them private?

[–] FarraigePlaisteach@lemmy.world 2 points 11 hours ago

I have a general idea. I appreciate the info :). I’ve made a point of having nothing sensitive in the contents or the requests (I don’t have any forms, for example. It’s all static pages).

[–] FarraigePlaisteach@lemmy.world 1 points 11 hours ago (1 children)

Thank you for the very informative reply.

The HTTP and Gemini services are for vintage clients, but I would like the reverse proxy to keep my media collection private (and maybe SSH and SMB too). So I’m serving to modern clients in the case of reverse proxy. I was told that port forwarding is no longer considered secure enough and that if my media gets publicly exposed I could be liable for damages to license holders.

[–] FarraigePlaisteach@lemmy.world 2 points 11 hours ago

Linux running HTTP and Gemini servers. This is fine from home using port forwarding and afraid.org’s dynamic DNS.

[–] FarraigePlaisteach@lemmy.world 2 points 1 day ago (2 children)

They’re lightweight sites that exist to be accessed by vintage computers which aren’t powerful enough to run SSL.

That’s reassuring. Thanks, I was struggling with the concept and where to start but I should be fine now since I’m handy enough with a terminal.

Wonderful. Thank you!

[–] FarraigePlaisteach@lemmy.world 2 points 1 day ago (2 children)

Thanks, that’s a great explanation. I’m looking forward to being able to SSH in without port forwarding.

[–] FarraigePlaisteach@lemmy.world 1 points 1 day ago (1 children)

So those ports that I don’t put in the config remain publicly accessible? That would be perfect.

[–] FarraigePlaisteach@lemmy.world 1 points 1 day ago* (last edited 1 day ago) (7 children)

Thanks. You’re right about Navidrome supporting authentication. I’m using HTTP instead of HTTPS, though. I was advised to use a reverse proxy to avoid potential legal issues.

[–] FarraigePlaisteach@lemmy.world 0 points 1 day ago (2 children)

The standard is that everything gets captured by the proxy? I want to leave the HTTP and Gemini servers public. I also want those and SMB to remain accessible on the LAN.

[–] FarraigePlaisteach@lemmy.world 1 points 1 day ago* (last edited 1 day ago) (2 children)

Thank you so much. That clears up all my doubts. I’m running an ARM server ok the lan with port forwarding for HTTP (80) Gemini (1965) and SMB (not forwarded).

I made a typo in my original question: I was afraid of taking the services offline, not online.

 

I’m happily serving a few websites and services publicly. Now I would like to host my Navidrome server, but keep the contents private on the web to stay out of trouble. I’m afraid that when I install a reverse proxy, it’ll take my other stuff ~~online~~ offline and causes me various headaches that I’m not really in the headspace for at the moment. Is there a safe way to go about doing this selectively?

 

I've tried a few options over the years, including SMB and NFS, XBMC as well as HTML with javascript I found online.

I don't have a large collection of music (fewer than 100 albums), so hand coding things was actually one of the quicker options to setup. That's despite then hassle of hand coding the URL to each FLAC file as well as the album art. But sometimes the javascript doesn't handle large collections of FLAC and each implementation I tried had different quirks so I've sunk a lot of time into that in other ways without a satisfactory result.

I've heard of Emby, Jellyfin, Plex, Roon and Servio. I just need something that's simple to set up and access. I don't need fancy features beyond the ability to play the music with a pleasant UI that can be accessed from the web (HTTP, not HTTPS). I'd be running this from a Raspberry Pi 3B which already has the lighttpd server running.

I'm also considering just getting a portable, 128GB FLAC player with a minijack connection and moving on with my life without getting involved in networking at all.

Any recommendations for an uncomplicated way to approach to doing this?

Edit: Thanks so much for the helpful and enthusiastic comments! I tried Navidrome and had it up and running in ten minutes thanks to this tutorial video: https://invidious.nerdvpn.de/watch?v=7V5UUJlSknY

I had to install docker-compose on the RPi. Then I got an error which turned out to be because I also needed a separate docker daemon which I installed following these instructions: https://www.simplilearn.com/tutorials/docker-tutorial/raspberry-pi-docker

In just 10+ minutes I had my music collection accessible from all my devices - thanks again!

 

I’m interested in different perspectives so I’d like to avoid USA, GB etc.

 

It let you take just a photo which was sent to a random other user of the app. In return you got their latest photo. That was it. All parties stay anonymous.

I really enjoyed it and found it more interesting than browsing the web. I might send a picture of an unusual building I was passing, the other person might send the contents of their fridge.

I’m surprised it died because there’s nothing else like it that I know of. Did anyone here use it?

view more: next ›