this post was submitted on 06 Apr 2025

295 points (98.7% liked)

Selfhosted

48727 readers

1833 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
No spam posting.
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.
Don't duplicate the full text of your blog or github here. Just post the link for folks to click.
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
No trolling.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago

MODERATORS

HybridSarcasm@lemmy.world

HybridSarcasm@lemmy.hybridsarcasm.xyz

295

New Jellyfin Server/Web release: 10.10.7 (forum.jellyfin.org)

submitted 2 months ago by otter@lemmy.ca to c/selfhosted@lemmy.world

79 comments fedilink hide all child comments

cross-posted from: https://aussie.zone/post/19146681

Jellyfin Server 10.10.7

Important Notes

Configurations behind a reverse proxy that did not explicitly configure trusted proxies will not work after this release. This was never a supported configuration, so please ensure you correct your configuration before upgrading. See the updated docs here for more information.

Security

Fix validation of API parameters to FFmpeg [GHSA-2c3c-r7gp-q32m], by @Shadowghost

Fix trusting forward headers if none are configured [GHSA-qcmf-gmhm-rfv9], by @JPVenson

Note: GHSAs will be published seven (7) days after this release.

General Changes

Fix regression where "Search for missing metadata" not handling cast having multiple roles [PR #13720], by @Lampan-git

Clone fallback audio tags instead of use ATL.Track.set [PR #13694], by @gnattu

Backport 10.11 API enum changes [PR #13835], by @nielsvanvelzen

Support more rating formats [PR #13639], by @IDisposable

Fix stackoverflow in MediaSourceCount [PR #12907], by @JPVenson

Upgrade LrcParser to 2025.228.1 [PR #13659], by @congerh

Include Role and SortOrder in MergePeople to fix "Search for missing metadata" [PR #13618], by @Lampan-git

Delete children from cache on parent delete [PR #13601], by @Bond-009

Fix overwrite of PremierDate with a year-only value [PR #13598], by @IDisposable

Wait for ffmpeg to exit on Windows before we try deleting the concat file [PR #13593], by @Bond-009

Fix 4K filtering when grouping movies into collections [PR #13594], by @theguymadmax

Remove empty ParentIndexNumber workaround [PR #13611], by @Shadowghost

Update dependency z440.atl.core to 6.20.0 [PR #13845], by @Shadowghost

Jellyfin Web 10.10.7

General Changes

Fix parsing minor version of Tizen [PR #6661], by @dmitrylyzo

Fix re-focusing on pause button when displaying OSD [PR #6510], by @dmitrylyzo

Fix skip button not displaying correctly with OSD [PR #6583], by @rlauuzo

Fix catalog plugin page not setting page title [PR #6570], by @nielsvanvelzen

top 50 comments

sorted by: hot top controversial new old

[–] renegadespork@lemmy.jelliefrontier.net 74 points 2 months ago (37 children)

Configurations behind a reverse proxy that did not explicitly configure trusted proxies will not work after this release. This was never a supported configuration, so please ensure you correct your configuration before upgrading. See the updated docs here for more information.

Well I’m glad I read that before upgrading!

[–] sugar_in_your_tea@sh.itjust.works 31 points 2 months ago (7 children)

It's odd to throw that into a patch release. I guess we'll find out if I did it correctly.

[–] jonne@infosec.pub 9 points 2 months ago (1 children)

I mean, it's patching a security issue caused by trusting headers it shouldn't, so I don't think they should wait for a big number release.

[–] sugar_in_your_tea@sh.itjust.works 16 points 2 months ago (1 children)

Why wait? Just release it as a big number release. The version number doesn't define the size or cadence of a release, it just says whether there's a breaking change.

[–] mac@lemm.ee 7 points 2 months ago* (last edited 2 months ago) (4 children)

At least in my org we use semantic versioning ( Major.Minor.patch) where patch must either be a new feature, a fix, or something that is backwards compatible

Minor can be breaking

Major is basically something you're proud of lol

load more comments (4 replies)

load more comments (6 replies)

[–] 486@lemmy.world 20 points 2 months ago* (last edited 2 months ago) (2 children)

Thanks for pointing this out! I probably would have missed this, since I didn't expect such a change for a patch release.

Their documentation mentions:

For jellyfin to know which reverse proxy is trusted, the IP, Hostname or Subnet has to be set in the Known Proxies (under Admin Dashboard -> Networking) setting.

Does this really mean, that the only way to configure this is through the web UI? This is kind of a problem when deploying it, since without the reverse proxy I can't reach the Jellyfin server. Is there no way of doing this outside the web UI, via a config file or something?

Edit: Apparently the configuration for the proxies is stored in Jellyfin's network.xml config file. So it should be possible to do this without manually configuring it via the web UI.

Another edit: It works. Adding <KnownProxies>[proxy ip or hostname]</KnownProxies> in place of the empty <KnownProxies/> key to that config file does the trick.

[–] jagged_circle 3 points 2 months ago

Yeah the lack of info in the docs on how to configure jellyfin in the CLI is pathetic

[–] Lem453@lemmy.ca 2 points 2 months ago* (last edited 2 months ago) (2 children)

If I run traefik and jellyfin in docker, do I add the docker IP of traefik as the trusted proxy?

[–] klopstock@feddit.org 2 points 2 months ago

I think you can use the container name if both containers are in the same docker network

load more comments (1 replies)

load more comments (35 replies)

[–] node815@lemmy.world 26 points 2 months ago (3 children)

Not related to the server, but I was very happily surprised with the latest Roku Jellyfin channel. A complete refresh of everything and it's great to see it.

[–] gazby@lemmy.dbzer0.com 22 points 2 months ago (1 children)

You'll want to get off Roku soon, they're already testing preroll ads for the home screen.

[–] node815@lemmy.world 10 points 2 months ago (3 children)

I can see them doing that, I use a DNS ad-block (Adguardhome) with plenty of filters and last night, I spotted that they were able to inject two ads (standard one to the right of the channels and one at the bottom below the menu for the new Minecraft movie when they changed my background. So, they are finding ways around this stuff. I simply disabled the Sponsored themes. We are on the fence about replacing the TV later this year but not 100% sure just yet. It's been quite buggy randomly rebooting when switching sources and other things.

[–] gazby@lemmy.dbzer0.com 9 points 2 months ago (1 children)

FWIW AndroidTV is getting worse all the time also 😭 The only assurance we have is that the TV isn't connected and AndroidTV is in a separate box.

[–] Squizzy@lemmy.world 2 points 2 months ago (1 children)

In what way is it getting worse? I was hoping to move and use some patched apps and foss apps, is that being restricted?

load more comments (1 replies)

[–] sugar_in_your_tea@sh.itjust.works 4 points 2 months ago* (last edited 2 months ago) (1 children)

)

You dropped this. 😀

Back on topic, anyone have a rec for an alternative? I basically just need Netflix and Jellyfin, and hopefully I won't need Netflix soon (my SO keeps finding NF originals they must watch). I to use a regular remote, but AFAIK nothing provides a nice UX for Netflix w/ remote outside the official app.

I absolutely prefer something FOSS.

[–] AtariDump@lemmy.world 3 points 2 months ago (3 children)

Minus Netflix? Kodi.

With Netflix? You’re not finding anything 100% FOSS.

load more comments (3 replies)

[–] marauding_gibberish142@lemmy.dbzer0.com 2 points 2 months ago

Why aren't you just using Kodi?

[–] timbuck2themoon@sh.itjust.works 7 points 2 months ago (1 children)

For real. JF roku team is killing it. Latest release is so nice.

[–] 1hitsong@lemmy.ml 8 points 2 months ago

🤘 Thanks

[–] 1hitsong@lemmy.ml 6 points 2 months ago

🤘 Enjoy

[–] hperrin@lemmy.ca 7 points 2 months ago (2 children)

My friend who’s been praising Plex for years and making fun of me for using Jellyfin instead just told me the other day he’s thinking about switching. It’s their new subscription fee that finally did it. xD

[–] kcweller 6 points 2 months ago (1 children)

It's what made me switch this weekend. I didn't know I missed the "Episode ends on (time)" functionality until I got it with Jellyfin, Holy shit that's so nice ❤️

load more comments (1 replies)

[–] cupcakezealot@lemmy.blahaj.zone 2 points 2 months ago

updated on mint this weekend; admittedly it's not a big library (mostly just for me and my family) but it was pretty painless. i put in my trusted proxies ahead of time and backed up /etc/jellyfin and /var/lib/jellyfin ahead of time. no problems at all.

[–] Supernova1051@sh.itjust.works 2 points 2 months ago

So I upgraded and tested not adding a trusted proxy (using Traefik in front of Jellyfin) and nothing broke. Was it supposed to break or is it just that its insecure? Am I less secure by not adding it as a trusted proxy?

load more comments