Here is the video I followed for SWAG. Note that this (and most of IBRACORP's guides, which are all fantastic) uses Unraid as the OS, which automates a lot of the processes.
And here is a written guide by the same group to go with or replace the video if this is more your speed: https://docs.ibracorp.io/swag-2/
I'll be honest, even for "beginners" (which I was when I started this) this is still a lot to take in. Let me know if you run into any specific questions and I can try to help you.
Yeah that's a good point. The joke is mostly for my own enjoyment or any random user who happens to forget the jellyfin. subdomain.
I have had a few hits to /wp-admin, but cloudflare actually blocks those for me (I don't use a tunnel but I do use them for the domain name which helps a bit). I might just shut down the main page then.
While technically not strictly necessary, it adds more robust authentication methods, and makes it easier to build out other apps if you want to in the future without having to re-do the sign-in process for all of your users. You can have things like 2fa and other things that make it harder for bots to get in and easier for users to stay in. It also makes it easier to keep track of login attempts and notice compromised accounts.
Edit: There are also alternatives like authelia that may be easier to implement. I don't really trust most web apps to be ultra secure with internet-facing sign-in pages so it just feels like "good practice" to hide behind an auth service whose sole purpose is to be written and built securely. Plus once you learn how to set up fail2ban with an auth service, there will be no need to re-learn or re-implement it if you add a 2nd app/service. Very modular and makes testing and adding new things much easier.
Another benefit is that it has a nice GUI. I can look at logins, add services, stuff like that without touching config files which will be nice for those who don't like wading through text files to change config.
I used several separate guides plus help from a friend. Check out space invader one's YouTube channel. I'm not at my pc right now but I can gather some of the tutorials I used when I get back.
I kept the main domain open, but redirected it to a rickroll
SWAG reverse proxy with a custom domain+subdomain, protected by authentik and fail2ban. Easy access from anywhere once it's set up. No vpn required, just type in the short subdomain.domain.com and sign in (or the app keeps me signed in)
They really do! It's nice to read something that's clearly hand crafted and high quality, especially the big news roundups that you do, as opposed to the usual SEO slop most news sites have. It's a treat every time a new one comes out.
On lemmy, I just browse "all" then filter out anything I don't want instead of the opposite. I don't use Mastodon much, or any twitter-style platform. As for videos I still use YouTube, just through the FreeTube application on desktop.
Edit: one thing I do follow is the gaming news posts by this person, who puts a whole lot of effort into them: @PerfectDark@lemmy.world
Honestly that's kind of what lemmy is, in a roundabout way. I think you are right, but actually getting people to engage with that would be difficult. Today, word of mouth with younger people mostly revolves around individual things inside centralized platforms like a TikTok meme or something. I think in addition to independent sources of content, there needs to be a cultural change in how everyone accesses content. That's the hard part.
Yes you said it better than I could have. Not only the perverse incentive, but also just the way ads have annihilated the usability of the internet for the average user. I know some sites can't exist without ads, but the web now is an unusable mess of for-profit click bait SEO slop and the average non-profit oriented enthusiast with a website for something has a harder time than ever existing because of it.
I am not smart enough to know what to change, but I know something has to change. Short of a complete upheaval of the current web, the ones profiting off the current model will do everything in their power to make sure nothing changes.
This is why I'm conflicted. AI destroying ad revenue is that upheaval that could be fast and powerful enough to disrupt the status quo, but at what cost?
Yes, but that's besides the point.
It can pass through. There is even an official Authentik guide on the various methods specifically for Jellyfin: https://integrations.goauthentik.io/integrations/services/jellyfin/
Same with Authelia, though I don't have a link for that on hand.