• 0 Posts
  • 6 Comments
Joined 1 year ago
cake
Cake day: December 7th, 2023

help-circle

  • You should not be using NAT to access your Plex externally, I will explain.

    App.plex.tv and the apps use Plex services to generate a point to point connection from remote clients through your router to the server. This is important because you never need to expose a private IP to the Internet, and the authentication can be protected with something robust like a Google account which support 2FA and even phishing-resistant 2FA.

    The combination of more advanced security and secure/convenient SSO authentication are one of the biggest benefits of Plex in my opinion.




  • Lots of great ideas in this thread. It sounds like you prefer Jellyfin, but I always encourage people to consider Plex. Plex is excellent, and even if you prefer the features or interface of Jellyfin, you should never expose any application (Plex, Jellyfin, or otherwise) directly to the Internet. This should be non-negotiable. Plex uniquely solves for external access with the mobile/desktop apps and app.plex.tv by brokering client connections into your network without a NAT/PAT on your router or firewall. Plex also supports Google logins, which means that you can now have 2fa and potentially phishing-resistant 2fa if you secure your Google account with a passkey.

    At my company we only expose our applications behind a WAF and firewall, and I see that some folks here have recommended Cloudflare. For those who may not know, it is no longer enough to simply rely on a firewall. When your application is built with components that may become vulnerable over time, it’s critical to use a WAF.