I don't know of any private trackers who are interested in users in your particular circumstances. The reality is, you can't really seed behind CGNAT. I would really consider shelling out for a VPN, you can get an okay one for 5-10 euro a month. If you're technically inclined, you could even set your own up on a cheap VPS for less, given you don't need fast networking.
liliumstar
If you have more experience with Linux CLI over powershell, I'd go with that. There are a few options: WSL2, MSYS2, Cygwin.
It makes way more sense to implement an auth cooldown over increasing the server load for a single action. I can't speak on the ideal settings for Argon2id, but I like to think the defaults are fine in most cases.
It is possible to tonemap DV to SDR, and I think to static HDR as well. Look into madvr and/or mpv. Both should be able to provide real-time tonemapping during playback. For reference, these pink/green videos would be DV Profile 5 (P5). I've heard the results are not great, so I would stick with P8 hybrid releases.
To start small setup a static website behind nginx. This requires you to create a basic website or copy a template, it goes somewhere in your filesystem, in linux /var/www is common. Once you have that, setup the nginx service and point it to that location. You can do this locally then expose it to the net or put on a VPS. Here is a dead simple guide presuming you have a remote server: https://dev.to/starcc/how-to-deploy-a-simple-website-with-nginx-a-comically-easy-guide-202g
Once you have that covered, ensure you know how to setup ssh keys and such, then install, configure, and run services. From there, most things are easy outside of overly complicated configurations.
When you are seeding, you broadcast to other peers that you have pieces available. The most efficient way to exchange data is for them to open a connection to you. Without an open port (from port forwarding) they have no way to make this direct connection.
I happened across this tool to help you create configs, it looks pretty good, easier than piecing together all the parameters separately: https://www.digitalocean.com/community/tools/nginx
Seems like it has directions for certbot and generating dhparams, etc. as well.
I would approach it this way:
- Learn to configure and install Jellyfin the way you like it. You sound like you have a good start on that. JF handles metadata for you, and you can also manually match items if/when it matches up. The only extra plugins I install are some of the ones for extra metadata providers and TMDB box sets.
- Setup Jackett with the qB search so you can run manual searches for stuff against your indexers.
- If you want to use docker, learn docker. There's a million tutorials around. You can use Docker Desktop on Windows if you want a GUI to help you out. Since docker on Windows runs on WSL2, it's a good opportunity to mess around with Linux if you aren't familiar.
From there you can work your way up to full automation and such if you like. I don't think it's necessary for most people.
As for data layout, just make some folders like movies, tv, music, etc, and lay out stuff in there logically. If you have a fancy storage setup, you might do separate shares for them, whatever works for you. Some people like to link from their "download" folder into their actual media folder to keep things clean. You can do hard and soft links on Windows with NTFS, but it's kind of a pain.
Mullvad doesn't have port forwarding, so that's going to be a factor.
For something like that, you'd want a VPS with 2-4 cores, 4 GB RAM, 80 GB SSD. Any less and you'll start to run into problems when adding bridges and stuff.
So, it's really a matter of what deals you can find in that bracket, and if you care about the geographical region it's hosted in. Usually https://lowendtalk.com/ is a good place to start looking at options.
I think what you have is fine, and wouldn't worry about it too much.
That said, I run unbound with pi-hole, directing the dns queries through a wireguard tunnel. It's a bit slower, but I do like having my own recursive DNS, especially with news that more and more services are implementing DNS level blocking.
Yeah, you can turn off registration without a token. Then, if you want someone to register you can issue them a registration token, or manually create their account.
Federation can be turned on, on a case by case basis.
You can set rooms to invite only and not discoverable. Alternately, you can use an invite-only space that allows users to join rooms from there.
The first two parts are done in the server config, see the synapse docs. The last is done once the server is setup and running as an admin.