this post was submitted on 07 Dec 2025
556 points (96.2% liked)
Technology
77635 readers
3019 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
You can already do number 2 (with some restrictions). You have to set up your networking tab correctly, use blank passwords, and uncheck "allow remote connections" for the "local" accounts. i have things set up so that external users are forced to log in and local users just pick a profile. If you also add your external users' IP addresses to the LAN Networks box, they'll be treated as an internal user too (though how you keep that up to date is a bit more challenging). It's not precisely the Netflix experience but it works well enough for us
I'll have to look into that. Last I remember they removed that and local simple pin. Because it could be used to bypass security even from outside network. You are running current version right?
Ya - or close enough (10.11.3). My LAN networks are my server and workstation subnets (both /24s) and my external NAT (my public ip). I also have my reverse proxy address (from jellyfin's perspective) in my known proxies. From there, my external users are set to allow remote connections, have passwords set, and are set to "hide this user from login screens" and my internal users are set to NOT allow remote connections and to NOT hide from login screens. After that, i just use my public dns for every device whether it's internal or external and call it a day