I'm trying to think of a way to allow friends and family access to my unraid server but I'm not sure of the best way to do it. I don't want the server open to the net due to security concerns. I was considering setting up a raspberry pi on the DMZ side of my router and then allowing the pi access to the server.

 

I'm just not sure the best approach.

 

I'm running unraid 6.1.7

What type of data do you want them to access?  Plex Pass is a common solution if you are just talking about media files.

Media (family photos, video, etc) mainly. I don't trust Plex or many 3rd party service options. I'd prefer FTP.... but maybe 3rd party is the way to go.

Depending on the quantity and tech savviness of your user group, VPN is an option.

 

As an alternative to Plex, Emby does video without requiring an account with a 3rd party.

Thanks for the emby suggestion, I'll look into it.

 

How can I allow emby (for example) access to my fileserver without it being on the DMZ?

17 minutes ago, Pandemic said:

How can I allow emby (for example) access to my fileserver without it being on the DMZ?

Forward the single port emby needs to the fileserver IP, or for even more security you could use the new feature in 6.4RC series that allows a different IP for dockers, that way the only outside traffic is to a single port on the emby docker IP.

Hmm... what's the best way to upgrade from 6.1 to 6.4?

3 minutes ago, Pandemic said:

Hmm... what's the best way to upgrade from 6.1 to 6.4?

Best to get to 6.3 first.  Plugins - check for updates.  That'll get you to 6.3.5

 

You're going to have to delete and recreate your docker.img file (just re-add the user templates under Add Container, and you'll be back running within a couple of minutes).

 

After that, then 

 

Just updated to 6.3.5 .... wtf is up with the second parity option?

 

I may also just wait till 6.4 is official to update further. I'll look into the port forwarding option. Maybe KODI would work best for some media options for my parents... but that wouldn't work so well with photos. Not sure of the best solution.

So I see an emby server for docker - I'd load that onto the unraid box, forward the port from router, and then someone from WAN should be able to use the data, eh?

On 7/14/2017 at 7:10 PM, Pandemic said:

Just updated to 6.3.5 .... wtf is up with the second parity option?

 

I may also just wait till 6.4 is official to update further. I'll look into the port forwarding option. Maybe KODI would work best for some media options for my parents... but that wouldn't work so well with photos. Not sure of the best solution.

 

I use Plex and you can add your VIdeos, Photos and Music in it to share on a user basis easily. its secure enough and infinitely more secure than FTP.

On 7/14/2017 at 7:10 PM, Pandemic said:

Just updated to 6.3.5 .... wtf is up with the second parity option?

 

 

Second Parity is for providing a second parity disk so in theory you are protected from a potential full 2 disk failures. not normally needed if you only have a few disks. I have 14 total 2 are Parity, 2 are used in my Cache. thats 10 disks for data and if i lost one or two near same time im protected. NoT so if you only have one parity disk.

40 minutes ago, Pandemic said:

So I see an emby server for docker - I'd load that onto the unraid box, forward the port from router, and then someone from WAN should be able to use the data, eh?

 

 

yes but they like Plex would need the emby app or a device that can load it like a settop box or web browser

 

for port forward you would set your docker with a specific port number then you port forward the IP of your UnRaid server and the port the docker container (Emby/Plex) runs under.

The thing I have against plex or other companies is the data they collect and store. In theory, what would happen if I added a song  or movie to share with a friend or family member? If, say, the MPAA bought plex they would have access to my library. I prefer the idea of emby where I can grant access to people directly.

19 hours ago, Pandemic said:

The thing I have against plex or other companies is the data they collect and store. In theory, what would happen if I added a song  or movie to share with a friend or family member? If, say, the MPAA bought plex they would have access to my library. I prefer the idea of emby where I can grant access to people directly.

 

Read this:

https://www.plex.tv/about/privacy-legal/

I use the letsencrypt docker which is an nginx server that also includes fail2ban. This reverse proxies to emby. I only forward port 443 for letsencrypt. So you connect to https:// mydomain/emby or https://emby.mydomain. With emby you can share movies, tv shows, music, live tv, books and photos. You can setup differ users and passwords with different access. You can use the app which is available for many devices or just use a web browser.

dmacias, so you run letsencrypt which allows emby to connect to your file server or does it act as a landing page for myip/emby?

2 hours ago, Zonediver said:

 

Read this:

https://www.plex.tv/about/privacy-legal/

What's your point?

dmacias, so you run letsencrypt which allows emby to connect to your file server or does it act as a landing page for myip/emby?

It acts as the landing page. The letsencrypt docker is a nginx webserver that uses letsencrypt to provide valid certificates. So you can use a dynamic dns service like noip, duckdns... to connect to your home using https. Emby runs behind the nginx server which provides a reverse proxy to it. I also use it to connect to Libresonic so I can stream music from home.

6 hours ago, Pandemic said:

What's your point?

 

The Point is, that Plex doesnt track your private activity and take care of your privacy - they use only system relevant infos - thats all.

Edited November 2, 20178 yr by Zonediver

On 11/2/2017 at 9:23 AM, dmacias said:

On 11/2/2017 at 9:09 AM, Pandemic said:

dmacias, so you run letsencrypt which allows emby to connect to your file server or does it act as a landing page for myip/emby?

It acts as the landing page. The letsencrypt docker is a nginx webserver that uses letsencrypt to provide valid certificates. So you can use a dynamic dns service like noip, duckdns... to connect to your home using https. Emby runs behind the nginx server which provides a reverse proxy to it. I also use it to connect to Libresonic so I can stream music from home.

 

Going to try setting up letsencrypt in unraid soon. How did you install emby to run with it? I'm pretty green when it comes to this type of stuff.

 

I got letsencrypt "installed" but now I'm not sure how to modify it - putty?

Edited November 8, 20178 yr by Pandemic

In the letsencrypt/nginx/site-confs/default I added this for emby with your server's ip and emby port. Or the ip of emby if you set it with its own.

   location /emby {       include /config/nginx/proxy.conf;       proxy_redirect off;       proxy_pass http://192.168.x.x:8096;      # Send websocket data to the backend       proxy_set_header Upgrade $http_upgrade;       proxy_set_header Connection "upgrade";   }

I have my unRAID ssl port set to a different port.
I forwarded port 443 to my server on my router. I also setup dnsmasq on the router so lan requests for my domain go to the server. I connect to https://mydomain/emby. I setup secure usernames and passwords for emby users.

If you find my posts in the letsencrypt thread there's probably more detail. Some use emby.mydomain