Don’t expose jellyfin to the internet is a golden rule.

That’s never made sense to me; why build an authn frontend instead of just clicking your user if the security is just an illusion anyways. “Use a VPN” is fine for a mainframe, but an active project in 2026 should aspire to be better.

Unfortunately, not everyone is tech-literate enough nowadays to understand how a VPN works, nor do they want to

Isn’t it easier to set up a VPN than expose it to the internet?

Oh absolutely, difference being that you only need to expose the service once, versus helping however many people set up VPNs to access the service on your LAN

I know way too many people who won’t remember to toggle it on, or just won’t deal with it It’s just not convenient enough