Correct.

With normal split tunneling you can normally do something like this anyways, but it can be finicky to configure, and easy for something like DNS, etc to access the internet without your VPN in the middle. And sometimes if your VPN fails to connect, you could be connecting without your VPN.

By using docker with gluetun + qbit (I believe docker images for this setup exist already) you can force it to use only your VPN, and if the connection fails then your bittorrent client can’t connect. With gluetun all your bittorrent traffic would flow through your VPN, but there’s a way it can be configured to allow only your webui port to be accessed locally on your network

Also symfonium

I realize it’s not a satisfactory solution, since you won’t be able to use facilities like artist/album/etc to explore.

But in navidrome I think you can make a smart playlist based on file path, which you could use to include all of YOUR songs in the playlist if it is in a different root path.

And in this setup you can fairly easily use gluetun to force all its traffic through VPN

Anyone with Navidrome should consider trying this. It provides a means to create & modify the smart playlists graphically & makes it easier to rate songs with stars vs the web UI

Responding to myself…

Datasheet reports 7.05 idle watts (~11w at active random read) so depending on what it considers idle, it’d be 8*7.05|11= 56.4:88W

Server clocks in at ~102W. Halving the drives would reduce the power by 27 : 43%

And in theory other components (motherboard, CPU…) must be using anywhere from (102-88) :(102-56.4)= 14 : 45.6 W.

Thanks! I need to look more into what the power implications of 8 drives is - they never spin down, so I assume they are a non-trivial portion of my power consumption.

That said, I’ve been considering upgrading to something recent and low power anyways. It would be a good opportunity to sneak in some useful features too,

• Maybe the possibility of transcoding a video stream
• USB3 (not a huge deal)
• Non VGA display (useful, for when connection issues arise)
• Audio jack (I could use navidrome jukebox mode!)

Which the old hardware wouldn’t support without adapters, cards, etc.

Proton, some of their paid exit nodes support P2P

• Server - Desktop Tower

  • Build - Intel server board & CPU based on old serverbuild naskiller guide
    • OS on SSD
    • ZFS ON 8 6TB DRIVES, YIELDING ~36TB of storage, recoverable with up to two failed drives
  • Runs (via docker)
    • Navidrome (webui used daily @ work, dsub on phone, feishin on desktop)
    • Jellyfin (used almost exclusively locally on my TV, occasionally to watch with friends on web)
    • Nextcloud (used occasionally, mostly backs up password files, etc or to share. Thinking about replacing.)
    • QBitTorrent with glutun VPN
    • Audiobookshelf - used frequently for audiobooks. Occasionally for podcasts. Often more convenient to use antennapod/pocket casts on phone for active podcasts)
    • Kavitas - used seldom. Thinking about stopping. I like using obps on my rooted kindle to access my library.
    • Changedetection.io -watch some sites for new products, etc
    • Kiwix (local wikipedia copy I use shortcuts in FF locally to search for things)
    • Homepage (local links I use on local machines to my services)

• Raspberry pi

  • Adguard home & unbound - block most garbage for any traffic from my home

Thoughts - I’m considering downsizing. I don’t really need all that much space, and it can be a headache at times. With drive replacement costs on top of power (~$320 a year) I consider either going to a vps or downsizing to what could run on a small compute like the n100 or a raspberry pi5, etc.

Agreed.

I dia just find this: https://forum.jellyfin.org/t-jellyfin-authentik-duo-2fa-solution-tutorial

Which claims app compatible 2FA via authentik

1. Nothing like a sonic analysis that I know of jellyfin.
2. Never had issues with x265 other than for devices that don’t have the computation power to decompress. Direct play to my TV with 4K streams have always been excellent.
3. It could heavily limit apps, but you could use authentik/authelia to enable access to jellyfin, so external access requires MFA. Internally apps could access the local IP normally without authentik. But bouncing off authentik first would likely prevent most (all?) Apps from working externally - you’d likely only have the webui externally. Can’t think of a solid solution until Jellyfin natively supports 2FA

I know you want a single ‘yes’ for the whole package which is fair, and Jellyfin doesn’t offer all of these things, but I’ll at least mention:

• A dedicated music app?

  • Its FOSS and there are several excellent apps in my experience worth looking into. I absolutely love feishin (for jellyfin or navidrome). On android I’ve liked finamp and Gelli.

• Music filtering/smart playlists?

  • smart playlists - Not that I know of

• Sonic analysis?

  • not that I know of

• Good 4k/x265 performance?

• I actually am not sure what issues you have here. Are you talking about transcoding it? I most often use native play and so long as the device receiving x265 can handle it I’ve never had issues

• Has a third party (or built in) utility that shows me streaming usage per person?

  • https://github.com/CyferShepard/Jellystat

• Allows me to limit remote users to streaming from a single IP address at a time?

  • single IP, I am not sure. But you can limit the number of simultaneous connections they can have (e.g. only one stream, etc). I realize that doesn’t have the same exact result in edge cases.

• Let’s me watch something together with another remote user?

  • Yes. Syncplay exists on it. I have had good experiences with both users in browsers app. But on webos TV app it doesn’t work for me.

• Has an app for most any device (like Plex or Emby) that does NOT require sideloading?

  • Pretty sure they have webos/android TV apps, android, iOS, a desktop player, web interface. I have first hand experience with android, web interface, Linux/windows, webos. There is a roku app, but I don’t knknow if it requires sideloading.

• Has built in native DVR steaming/recording support? Jellyfin DVR capabilities exist, but I can’t speak to them.

• Two factor authentication? Unfortunately, not. I think there are hack ways to pass it through other validators/credentials, but I agree it needs native support of some kind.

For the music gripes - honestly, navidrome IMO. If folks are happy with experience with Plex for everything, I am happy for them, but libraries specialized for media types can have big benefits and focused features.

• Video: Jellyfin (or Plex)
• Music: Navidrome
• Audiobooks: audiobookshelf
• Podcasts: still searching. I partially use Audiobookshelf here but don’t love it for podcasts.

Is .com fixed in some way to prevent the same scaling? I thought it was basically the domain sellers increasing the prices year over year

FWIW, in the US, seems like you’re ‘guaranteed’ that you’ll keep 30 hours worth of minimum wage per week. the minimum wage is abysmal, so ~870 a month, which isn’t really enough to survive on in many places. I suspect it would be terribly difficult to pay rent, gas/electric, buy food, pay for public transport and/or gas.

I think this person was dumb. I think they fucked up badly. I think garnishment could make sense if the terms were more reasonable. But I think the current terms could absolutely be detrimental to ones survival.

Title III also protects individuals by limiting the amount of earnings that may be garnished in any workweek or pay period to the lesser of 25 percent of disposable earnings or the amount by which disposable earnings are greater than 30 times the Federal minimum hourly wage prescribed by Section 6(a) (1) of the Fair Labor Standards Act of 1938. This limit applies regardless of how many garnishment orders an employer receives. The Federal minimum wage is $7.25 per hour. Source