This is an automated archive made by the Lemmit Bot.
The original was posted on /r/selfhosted by /u/agneev on 2025-05-24 16:48:56+00:00.
TL;DR: I use Jellyfin over Traefik while streaming remotely
Hello,
As I recently moved to using Jellyfin over Plex, which I detailed here, I was exploring ways to access Jellyfin remotely.
My ISP uses CGNAT, which means ports cannot be remotely accessed. I get around this by using Tailscale. The VPN creates a direct connection to my network.
To achieve this, I set up a fixed Tailscale IP address for the server running Jellyfin that is easy to remember. Since the server's LAN IP is 10.0.0.11, I set the Tailscale IP to 100.64.0.11.
Currently, Jellyfin is deployed in Docker, and listens both on a local VLAN network as well as an internal Docker network.
I wanted to maintain the same domain name across both local and remote access routes, that way no reconfiguration is needed. The local DNS was already configured to point the domain to the VLAN IP, but I needed to replicate this on Tailscale. I was already using NextDNS to block ads and decided to use the custom DNS feature to do just this:
Since it isn't possible for the VLAN to be reachable from Tailscale, I added the Tailscale IP of the machine.
Next, I added a route in traefik for jellyfin:
...
labels:
traefik.enable: true
traefik.name: jellyfin
traefik.docker.network: media
traefik.http.routers.jellyfin.tls: true
traefik.http.services.jellyfin.loadbalancer.server.port: 80
Finally, I updated jellyfin to reflect the domain that's used, set traefik as a known proxy to gather client details and designated the Tailscale IP range as local to curtail bandwidth limitations:
