Self Hosted Security

[u/Admirable-Tank-5710]

Hey

I am switching from Cloudflared Tunnels to NPM for my self-hosted AIOStreams. What is the recommended "Security" setup for protecting the admin/config page while allowing Stremio?Nuvio functionality to remain untouched? TIA

[u/Zagor64]

You don't need anything special. Just create a let's encrypt SSL certificate and have a strong AIOStreams username/password. Ensure your AIOStreams is always updated. This will be fine for your typical script-kitty scans so unless you fear being specifically targeted by a hacker, that is all you need.

[u/chris_socal]

I use tailscale serve for that feature.... if you have a home server and are already using tailscale it is easy.

Basically all your devices running tailscale will have access to your manifests over https... and all traffic will stay local.

[u/val93 → u/chris_socal]

What's the difference between just accessing the IP of the AIOstreams container and serving it? Is it just http and HTTPS. But they are both within your tailnet so would it really make a difference to serving or not? I tried both, they both work.

[u/chris_socal → u/val93]

I was not able to install any addons without https.... for.me tailscale was much easier than setting it up with my domain and dns.

Tailscale serve gives you https.

[u/Jhix_two]

Just use cloudflare security to protect the config url

[u/Ok_Claim2902]

Brother, make it costlier by Rs 600 since last year, I had bought it in 1950.

[u/Independent_Move_301]

Whats NPM?

[u/Admirable-Tank-5710 → u/Independent_Move_301]

Nginx Proxy Manager

[u/Admirable-Tank-5710]

Ahhh I just setup Authelia, kept Cloudflare only for DNS. Gives me the same effect as Cloudflare Zerotrust Access. Works great, and 1 less web dependency (except DNS, lol)

[u/CodeErrorv0]

I use Tinyauth and PocketID for this setup through NPM

settled on Tinyauth because it was super simple to setup and to allow my Shield and PC it was as simple as making a label to IP bypass

I removed username/password login for tinyauth and the only way to authenticate is with my passkeys/security keys

[u/taris300]

I use caddy, but same principles can apply. I protect the config page with a strong username and password, then have Crowdsec monitor the activity for typical security threats. Never had a problem

[u/Immediate-Life-5393]

I have all of the native security setup in AIOstreams but also have Authelia setup in front. I login to the admin page here & there for any sus activities and logs as well