• 0 Posts
  • 8 Comments
Joined 3 years ago
cake
Cake day: June 22nd, 2023

help-circle


  • I haven’t used Plex in a while, but I presume it would go similarly to my Jellyfin migration this year.

    I pulled out a 10 year old laptop from my pile of scrap, installed a light-weight Linux server that can run containers, and I’ve been running LinuxServer.io’s Jellyfin container on it. Updates are pretty easy and I don’t have to worry about cluttering the host box’s packages with dependencies that may or may not conflict with the other things I run in it.

    If you have the time to figure out how to run apps in containers, I highly recommend doing so. There’s a lot of documentation for Docker, and Docker Compose files make managing the containers pretty easy.


  • You’re delving into the unpleasant realm of risk assessment. How likely is the app going to be targeted by a threat actor, and how badly could they use it to damage your data or system?

    If it’s a public facing service, I’d immediately check if I have alternative applications I could migrate too. Any hold an outsider gets through the public facing app could be used to pivot further into my network.

    If it’s something that doesn’t interact with the network at all, then I wouldn’t worry nearly as much, but might look for alternatives any just because I know this isn’t going to get improved at all. Somewhere in the middle, you need to decide how much risk you can accept.





  • There’s some great answers already here, but I want to add a detail fir some context. Like others mentioned, Let’s Encrypt does just the bare minimum of verification. They aren’t really verifying that you are who you say you are, they are verifying you control the website. The reason is due to their goal.

    They want as many people as possible using a secure Web protocol, and that requires as many people as possible have a certificate for any websites they run. There is minimal verification of identity, but the benefit of encrypted communications and even that bare minimum id is a huge step up in consumer security from old unprotected protocols.