Tips, updates, and guides from the JellyWatch team.
The third-party Jellyfin plugin repositories worth adding in 2026, with manifest URLs, step-by-step instructions for adding and managing them, how to find any repository URL yourself, and the security considerations that actually matter.
Fail2Ban is not enough in 2026. This advanced security guide covers CrowdSec (collaborative IPS with crowd-sourced blocklists), GeoIP country blocking, rate limiting at the reverse proxy level, container security best practices, and real-time intrusion detection for your internet-exposed Jellyfin server.
Protect your internet-exposed Jellyfin server from brute-force login attacks with Fail2Ban. Covers installation, Jellyfin log parsing, jail configuration, Docker setup, and Cloudflare integration.
Protect your Jellyfin server with two-factor authentication. This guide covers the official TOTP 2FA plugin from the Jellyfin catalog, SSO-based 2FA with Authelia and Authentik, and step-by-step setup instructions for securing every user account on your server.
Unify login across Jellyfin, Radarr, Sonarr, and Jellyseerr with Authentik or Authelia SSO. This guide covers the jellyfin-plugin-sso OIDC configuration, Docker Compose for both identity providers, two-factor authentication, and protecting your entire self-hosted media stack with a single identity.
Access your Jellyfin server securely from anywhere using Tailscale - no port forwarding, no dynamic DNS, works behind CGNAT. This guide covers Tailscale installation, Docker integration, MagicDNS, and a WireGuard self-hosted alternative for users who want zero third-party dependency.
Protect your Jellyfin server from unauthorized access. Learn about reverse proxies, SSL certificates, firewalls, and authentication best practices.
