Jellyfin
Trusted Proxies Are an Authentication Boundary: Stop X-Forwarded-For SpoofingNew!!
A practical reverse-proxy security lab for X-Forwarded-For spoofing, exact trusted proxy ranges, direct-origin blocking, and negative tests.
Your Media API Key Is in access.log: Find It, Redact It, and Rotate It
Media API keys often leak through URLs, proxy logs, browser history, and support bundles. This guide shows where to look and how to rotate safely.
Running Local AI Alongside Media Services Without Fighting Your GPU
Run Ollama, Tdarr, Plex, Jellyfin, and Frigate on the same homelab more safely by understanding NVENC, NVDEC, CUDA, VRAM, scheduling, and monitoring.
Plex vs Jellyfin Remote Streaming: The Tradeoffs That Matter at Home
Compare Plex and Jellyfin remote streaming by account friction, real client playback, network path, privacy, transcoding, and recovery burden.
Tracearr Setup Guide for Plex, Jellyfin, and Emby Monitoring
Deploy Tracearr with Docker, connect Plex, Jellyfin, or Emby, validate live sessions and alert-only rules, and preserve a recoverable monitoring history.
Plex in 2026: What Still Works Free
A practical guide to what Plex still does without Plex Pass, where Remote Watch Pass matters, and when free local streaming is enough.
Move from Plex to Jellyfin Without Losing Your Rollback Path
Move from Plex to Jellyfin with a read-only parallel run, exact inventory steps, client acceptance checks, and restore and rollback gates before cutover.
Direct Play vs Transcoding in Plex and Jellyfin: What the Dashboard Proves
Use Plex or Jellyfin dashboard and log evidence to isolate container, codec, audio, subtitle, HDR, bitrate, client, and network playback triggers.
Quick Sync vs NVIDIA vs Intel Arc for Plex and Jellyfin Transcoding
Choose Quick Sync, NVIDIA, or Intel Arc from current codec support, driver and container fit, tone mapping, power, and measured concurrent demand.
Seerr Setup for Plex or Jellyfin, Sonarr, and Radarr
Deploy Seerr with Docker, connect Plex or Jellyfin to Sonarr and Radarr, separate requester rights from administration, and verify a recoverable request path.