SirMaple__
No worries. Better than reading that someone got hacked because they left Jellyfin wide open
You could even run a travel router, mini PC or Raspberry Pi, run the VPN on it, connect the Roku to it over the onboard WiFi adapter. On the PC/Pi you'd force all the traffic from the Roku towards Jellyfin over the tunnel. You could even define the Jellyfin in DNS (/etc/hosts) so the internet will never even know you're running Jellyfin. Something like https://raspap.com/ or even a openwrt travel router from the likes of GL.iNet would work.
Do not. I repeat do not expose Jellyfin to the internet. It has too many security issues to be directly accessible from the internet.
I use Jellyfin and only access it over WireGuard. I have a mesh setup between the routers at a few family members houses.
If you have absolutely no other way then to expose it to the internet you need to make sure that you whitelist only the approved IPs in your VPS firewall and block everything else.
It's called doing your job, Chuck. You should try it.
Damn. Val was a great actor.
25 hours and 5 minutes. Legend.
I use LUKS on my systems. I use mandos and wireguard in intramfs to connect to a mandos server to unlock LUKS during boot.
https://github.com/jellyfin/jellyfin/issues/5415