

WAF and DMZ too.
WAF and DMZ too.
Always have. Did you never read/watch V for Vendetta?
Yeah, I mean writing to a file. Do that in python, don’t wrap a script with more script.
You’re probably right about the process handling being the cause, but I wouldn’t worry about that and just do it right the first time.
“IP is good, actually” shouldn’t be a hot take. Those are the laws that licensing is built on.
Yup. Until you get into stuff like immutable distros, because that’s a whole different animal.
Modify the python script to include the new behavior.
I’ve never created a custom docker container, but I’m pretty sure you should make the entry point python itself, too.
Yes, those are the known vulnerabilities. We don’t know how many unknown vulnerabilities could be discovered in the future.
Firewalls can log dropped packets.
If, while using the tool, the rates remained higher over time, I think it’s still a net positive.
It depends on what you’re trying to do with it. Typically people only use Macs as servers when they’re doing development for Apple products.
Provide them with VPN access. If that’s too much for them, then they don’t get access. Tough. On the scale of security vs convenience, that’s nothing.
If you really really want, you should at least see if you can put a WAF in front, and put the server itself somewhere it doesn’t have access to the rest of your network (a DMZ) so that if and when it gets hacked, it doesn’t compromise the entire network.
Step one is check with the university IT department. Don’t put random unmanageable shit on other people’s networks.
Why a Mac running Linux? I can’t think of a use case for that.
I still don’t recommend putting jellyfin on the Internet. It’s not designed for it. There are some API endpoints you can access without authentication, not to mention potential authentication bypass vulnerabilities.
5 minutes is also probably too frequent. Leases are usually significantly longer. You might hit a rate limit and get blocked.
That doesn’t exclude a power issue. A lot of cards will light up and spin up even without enough power, then stop responding once something actually tries to use its capabilities.
You did plug in the GPU power cables as described in the manual, right?
Probably through that link in your screenshot that says “logs”. Or directly on the server. Consult the documentation.
What’s in the logs?
If it’s on the Internet, yes.
Given the state of the Internet, you should keep a healthy level of paranoia. I always recommend exposing as little as possible, and that means using only a VPN and not putting jellyfin itself on the Internet.
Technically yes, but as long as your WAN gateway doesn’t provide a route, clients will only know how to reach your own gateway.
Open it up and break it off.