Server ID in the jellyfin URL when using remote access
Hello,
I just exposed my jellyfin server and I want to check some stuff with you guys. Heres the setup:
- My domain is in cloudflare under the orange cloud (I know about abusing it but for now only one person will be using) and I geoblocked it only to be accessible in my country.
- Im using caddy to recieve the connection and reversing proxy it to the internal jellyfin ip (Ive opened port 80 and 443 for caddy on the router).
- Both jellyfin and caddy are on LXC containers on proxmox and they are unpriviliged.
- I set a max of 10 login atttempts per user before blocking
With that out of the way, I noticed that when I access jellyfin through the domain I get a url flag called serverID which is fllowed by an ID. Do you guys know if this info can be used to some kind of attack? Im not sure if this is a cloudflare or jellyfin info.
Also, do you guys think I can add something to make it more secure? Thanks in advance!