Lots of great ideas in this thread. It sounds like you prefer Jellyfin, but I always encourage people to consider Plex. Plex is excellent, and even if you prefer the features or interface of Jellyfin, you should never expose any application (Plex, Jellyfin, or otherwise) directly to the Internet. This should be non-negotiable. Plex uniquely solves for external access with the mobile/desktop apps and app.plex.tv by brokering client connections into your network without a NAT/PAT on your router or firewall. Plex also supports Google logins, which means that you can now have 2fa and potentially phishing-resistant 2fa if you secure your Google account with a passkey.

At my company we only expose our applications behind a WAF and firewall, and I see that some folks here have recommended Cloudflare. For those who may not know, it is no longer enough to simply rely on a firewall. When your application is built with components that may become vulnerable over time, it’s critical to use a WAF.

What about having to switch from a $32/user/month license to a $52/user/month license for just one or two features out of the dozens you end up paying for?

How many more times am I going to see this same title before X implodes?

Ah I did not know about Resolve on Linux. Capture One would have been my biggest issue then.

Apple sure did do a great job with the M series, and the fact that their laptop line can have such impressive performance without looking like an alien space ship means that I can easily take editing on the go with the same media catalogs from my USB-C thunderbolt drives without running into directory mapping issues when I switch back and forth.

My aging windows tower and retired work laptop were both struggling to keep up with my photo and video editing. Linux asnt an option for Capture One and Davinci Resolve, and the writing was on the wall for what Windows is becoming.

Combined with the failures in Intel Raptor/Alder lake CPUs, I took an unexpected leap into the realm of Apple silicon with an M4 Pro Mac Mini.

Apple is not a perfect company, but this new machine processes video faster than anything I’ve ever used, and for the first time since the 2010s it has replaceable (proprietary) storage.

Hah, yes that was an odd placement. It seems like a non issue though.

I very reluctantly put a new mac mini on order last Sunday. I didn’t feel great about it but I was feeling done with Windows for a bit at least for home use.

Plex is excellent, and even if you prefer the features or interface of Jellyfin, you should never expose any application (Plex, Jellyfin, or otherwise) directly to the Internet. This should be non-negotiable. Plex solves for external access with the mobile/desktop apps and app.plex.tv by brokering client connections into your network without a NAT/PAT on your router or firewall.

For a music library, even a small one, tracks should have proper metadata applied to them and be stored in directories. Plex provides guidance on this here: https://support.plex.tv/articles/200265296-adding-music-media-from-folders/

My own strategy: I deviate slightly from Plex’s file and directory naming strategy, but it works perfectly. I start with high quality music, mostly from Bandcamp and process it through Musicbrainz Picard into ALBUMARTIST\YYYY - ALBUMNAME\01 - TRACKNAME.FLAC. Picard sets the metadata and ensures that there is an album cover image also.

Before moving the organized files to my Plex server, I run them through MP3Tag and overwrite any mismatched artist names with the album artist (getting rid of artist fields with 'feat xxxx artist’s). This is important for when I sync files in Media Monkey to my iPod, since the iPod would break apart albums with multiple artists. My preference is to keep them grouped together.

Hope this helps good luck 👍. Let me know if you want to know a decent strategy on movie backups also.

It’s public information transmitted over airwaves and several sites exist already. Flightradar24 and adsbexchange are the two I use, though Elon and Taylor Swift are far too boring to pay attention to when you can watch refuelers and jets instead.

I used it on an Android DAP to sync my music collection from my NAS after giving up on Folder sync due to its issues with new file detection breaking after a daylight savings time change. Synching was definitely more reliable but it takes ages to do the scan.

At one point I had been playing GTA V online pretty consistently when I had a cheater start targeting me. It was pretty frustrating and after 30 minutes of that I gave up and closed down for the day. I shifted my attention to other games after that. I definitely get that they want to stop cheaters - cheaters ruin the fun for others. It’s a shame that the new anti cheat has made it so that Steam Deck players are stuck unable to play online.

You do not need to port forward to share a Plex instance over the Internet. App.plex.tv manages the inbound connections automatically. All you need to do is manage invites to your friends. They log in with their email/password or with Google SSO to app.plex.tv and your content will be available over a secure connection with no port forwarding.

Plex should not be accessed externally using a port forward. Always use app.plex.tv as it prevents unauthenticated users from seeing the instance.

Play services actually works very well for containerizing work apps. Better actually than on iOS. My work can offer a set of apps that are available in this isolated container and apply policy to them that doesn’t impact other areas of the phone. I can also shut off all of them with a single button when I am on PTO. Microsoft’s apps require these services to build the container, and I believe Android phones in China do not have play services. It’s not perfect, but I personally think it works very well.

The costs are definitely a huge consideration and need to be optimized. A few years back we ran a POC of Open Shift in AWS that seemed to idle at like $3k/mo with barely anything running at all. That was a bad experiment. I could compare that to our new VMWare bill, which more than doubled this year following the Broadcom acquisition.

The products in AWS simplify costs into an opex model unlike anything that exists on prem and eliminate costly and time consuming hardware replacements. We just put in new load balancers recently because our previous ones were going EoL. They were a special model that ran us a about a half-mil for a few HA pairs including the pro services for installation assistance. How long will it take us to hit that amount using ALBs in AWS? What is the cost of the months that it took us to select the hardware, order, wait 90 days for delivery, rack-power-connect, configure with pro services, load hundreds of certs, gather testers, and run cutover meetings? What about the time spent patching for vulnerabilities? In 5-7 years it’ll be the same thing all over again.

Now think about having to do all of the above for routers, switches, firewalls, VM infra, storage, HVAC, carrier circuits, power, fire suppression.

The cloud today significantly different than the 2003 cpanel LAMP server. It’s a whole new landscape. Complex, highly-available architectures that cannot be replicated in an on-prem environment are easily built from code in minutes on AWS.

Those capabilities come with a steep learning curve on how to operate them in a secure and effective manor, but that’s always going to be the case in this industry. The people that can grow and learn will.

The core features of a WAF do require SSL offload, which of course means that the data needs to be unencrypted with your certificate on their edge nodes, then re-encrypted with your origin certificates. There is no other way in a WAF to protect from these exploits if the encryption is not broken, and WAF vendors can respond much faster than developers can to put protections in place for emerging threats.

I had never considered that Akamai or Cloudflare would be doing any deeper analytics on our data, as it would open them up to significant liability, same as I know for certain that AWS employees cannot see the data within our buckets.

As for the captcha prompts, I can’t speak to how those work in Cloudflare, though I do know that the AWS WAF does leave the sensitivity of the captcha prompts entirely up to the website owner. For free versions of CF there might be fewer configurable options.

Can you educate me on the negatives of Cloudflare?

My company is on Akamai, who has a pretty solid combined offering of WAF, DNS, and CDN, and yet I still feel like their platform is antiquated and well overdue for a refresh.

Thinking back to log4j, it was cloudflare who had the automatic protections in place well ahead of Akamai, who we had to ask for custom filters. Cloudflare also puts out many articles on Internet events and increase adoption of emerging best practices, sometimes through heavy shaming.

Eyyy yes! I just picked up an MZ-N505 a few months ago! It’s been great at work to quickly start music without staring at my phone for 5 minutes first.