Tips, updates, and guides from the JellyWatch team.
qBittorrent 5.2.1 patches a high-severity SSRF vulnerability and fixes startup crashes, on top of the major 5.2.0 feature update with free disk space display, tracker status filters, and reboot automation. Here is what to know before upgrading.
The third-party Jellyfin plugin repositories worth adding in 2026, with manifest URLs, step-by-step instructions for adding and managing them, how to find any repository URL yourself, and the security considerations that actually matter.
Fail2Ban is not enough in 2026. This advanced security guide covers CrowdSec (collaborative IPS with crowd-sourced blocklists), GeoIP country blocking, rate limiting at the reverse proxy level, container security best practices, and real-time intrusion detection for your internet-exposed Jellyfin server.
Protect your internet-exposed Jellyfin server from brute-force login attacks with Fail2Ban. Covers installation, Jellyfin log parsing, jail configuration, Docker setup, and Cloudflare integration.
Protect your Jellyfin server with two-factor authentication. This guide covers the official TOTP 2FA plugin from the Jellyfin catalog, SSO-based 2FA with Authelia and Authentik, and step-by-step setup instructions for securing every user account on your server.
Jellyfin 10.11.7 patches 4 security vulnerabilities rated extremely important. All users on versions prior to 10.11.7 should upgrade immediately. Details on the fixes and how to update safely.
Unify login across Jellyfin, Radarr, Sonarr, and Jellyseerr with Authentik or Authelia SSO. This guide covers the jellyfin-plugin-sso OIDC configuration, Docker Compose for both identity providers, two-factor authentication, and protecting your entire self-hosted media stack with a single identity.
Access your Jellyfin server securely from anywhere using Tailscale - no port forwarding, no dynamic DNS, works behind CGNAT. This guide covers Tailscale installation, Docker integration, MagicDNS, and a WireGuard self-hosted alternative for users who want zero third-party dependency.
Protect your Jellyfin server from unauthorized access. Learn about reverse proxies, SSL certificates, firewalls, and authentication best practices.
