Windows is fine for me. I work with it all day long too. But yeah Windows is just another enshitification product.

In that case I’ll let you off!
Tip: For markdown. You can add two spaces at the end of a line to put text on a new line.

Paragraphs…

All my media is shared from a Raspberry Pi 4 with a HDD attached to it via NFS. Jellyfin runs as a container on a cheap Chinese mini pc I got off AliExpress. I’ve not had any issues over the network. It even transcodes on a share of the Pi as my SSD that has Jellyfin on is too small for larger movies.

I used Plex for a long time and was very tempted by their lifetime plan. I tried Jellyfin but at the time it just wasn’t a patch on Plex. I continued with Plex but always had that itch to get away from closed source. I eventually tried Jellyfin again and whilst it’s definitely not as feature rich as Plex, it does what I need from it which is a central store of media that any TV in my house can use. I’ve even given a few friends a login so they can watch content.

I do love that it’s completely self hosted. I run it behind Caddy so it has a Let’s Encrypt certificate. All run in a Docker container with the media from an NFS share from a Pi4 with an external HDD.

That said, I still have Plex running as I have one Samsung TV and there’s no official Jellyfin client for it. Yes there’s some long winded developer way to get one on but I just can’t be bothered.

Caddy is awesome! I originally went for nginx proxy manager to manage my certs as it has a GUI. However, despite being text based, Caddy is so even easier to configure…

        email myemail@mydomain.net
}

jellyfin.mydomain.net {
        reverse_proxy 192.168.0.1:8096
}```


That's all there is to it. Caddy does the heavy lifting.

Ha. That’s my bad. I didn’t even read the firewall rules listing 22/SSH. I agree on not opening 22 to the world. It just invites bots throwing passwords at it.

I just read Minecraft in the original post which from reading runs from 25565 which I wouldn’t worry about. If OP needs 22 for admission I’d either whitelist it or use a VPN/Tailscale.

More effort than I would consider. I’d just allow all traffic incoming on that port. I’d only consider whitelist if someone was giving me grief. Even then that would be after blacklisting an IP wasn’t solving my problem.