

Depends on what you want. You can have the application have an https certificate which could either be one issued my a globally trusted issuer or could just be a self issued certificate that caddy is configured to trust. And caddy can then add the globally trusted certificates from let’s encrypt or whatever. But that definitely requires extra steps. Just, how secure do you want to be?

Problem isn’t the hosting, it’s the content licensing. It’s difficult to get a legal copy of the content that you can actually possess. Without that, doesn’t matter if you are streaming the content through self-hosted servers or playing it locally. It’s the content itself that is the real issue. It’s often just not “sold” only “licensed” or “rented”.