

My setup is: Proxmox - restricted LXC running docker which runs jellyfin, tailscale funnel as reverse proxy and certificate provider. So so don’t care about jellyfin security, it can get hacked / broken , its an end road. If so i will delete the LXC and bring it up again using backups. Also i dont think someone will risk or use time to hack a jellyfin server. My strategy is, with webservices that don’t have critical personal data, i have them isolated in instances. I don’t rely on security on anything besides the firewall. And i try not to have services with personal sensitive data, and if i do, on my local lan with the needed protections. If i need access to it outside my local lan, vpn.
I think that if you avoid giving personal information / interaction , there is no big deal they have your IP and name . Any big entity can get that easily if you are targeted. The issue is the information you give to them and being part of the big data processing. I don’t want them making money from my own data, also it’s better for the future of things with AI if it has less information to profile you. in the future it will be normal that profiling is a service to sell so you or your family would be tagged and have issues to get a job when they look at you. Or even gubernamental stuff like getting a citizenship or traveling to other countries.