That was the encore

Backup? What?

Thanks, I will take a look at those

My setup is quite similar, I currently have my tv disconnected from the network and stream via another device. What I would like to achieve is to use the tv capabilities to play my local streams, as I don’t use cloud streaming services, but I would need to connect it to the network.

I may look into setting a non-internet routed vlan and access point, so I can connect the tv to the network but not to internet, althought it may later become cumbersome as I would need to update the Jellyfin or Kodi apps

Yes. As I implied, my local arrchives are streamed via jellyfin

Sonarr takes care of it

On my synology nas I have installed navidrome to serve the music, and consume it via web, and a few android and linux apps like ultrasonic or supersonic

Depending on your level of paranioia. First, you don’t expose your containers, but their port(s).

With a reverse proxy, you will likely expose only 1 port, 443, no matter how many apps/containers/ports it will be pointing internally. For this, having a proper dns setup will be key, and a service like cloudflare dns (not tunnel), which additionally you can proxy your proxy. Also, you will need certificates (letsencrypt) for your traffic to be encrypted. Here, everybody will potentially have access to your services.

Another option is a zero trust tunnel, but as you had seen streaming may break tos. It will be likely enforced if you stream a lot, but I seriously doubt you’ll get any problem by having sporadic one or two users.

Tailscale, you need to add all the devices you need to access your services into the mesh, and you’ll need to re-authenticate every one again every few months.

Setting up a VPN (selfhosted) will require your devices to sign into it when accessing your services, and it seems to me the best approach as this way you will nave the most control over your setting.

Don’t forget to mention that, for this to work, your ISP should provide you with public IP, because if on CGNAT you will have to go with something like tunnels or tailscale.

I’ve found that as well with some files. At first I thought the issue was with the jellyfin instance had not enough capabilities, but after trying the same file with its subtitles, it worked on any other client: flatpak, web, and regular android. So for me it is the chromecast/androidtv device, so I am now looking what to replace it with

Joe-ker

What are you reinstalling? New haos on old kvm? Old haos on new kvm? New deployment?

From the logs I read that your user chris has no rw perms within the haos.

Protonvpn has a free tier

It is called “downgrading”, and it is not uncommon to have some packages downgrading when updating/upgrading a system, due to several reasons.