I see you’ve got some downvotes, but without anyone suggesting a solution.

You can add the mount points in the docker compose file and then configure Jellyfin to read from the path(s) mounted in the container (/media/movies)

Eg:

volumes: 
  # local path : path in container 
  - /mnt/storage/media/movies:/media/movies

https://github.com/OpenListTeam/OpenList

I’m actually paying a yearly subscription to support the project. I have the self-hosting task in my backlog, but I keep dragging it 😶‍🌫️

NewsBlur

I’m syncing Spotify playlists with Lidarr and play my music in Jellyfin or Symfonium.

I’m available for part-time 😁

The first thing that comes to mind is a combination between SBOMs generated for your self-hosted services (trivy, syfy, etc) which are pushed to OWASP Dependency-Track and whenever some vulnebrabilies are detected (note: you’ll get lot of notifications if the application is using a lot of libraries), trigger an event (not sure if node red can help here) which would run a script to disabled the vhost. (just a thought. I haven’t seen an actual solution)