smiletolerantly

This isn't really true. Even IF your router would fail catastrophically in the right way to expose your Server to the internet, or of it actually "ratted your traffic out" to the ISP and the ISP cared (which it does not), it's not illegal to hist Jellyfin, or put media on it which you own (which is not discernible from just.... Media being streamed).

Also your ISP has no part in your local network traffic.

Smh. I get wanting to be connected to a VPN, but being locked out of your own local network is just stupid.

This does not encrypt during transit, and my network is not a trusted party.

Then honestly, you have other problems than setting up Jellyfin.

For real though, if you think someone is (or might be) listening in on your local network, i.e. have physical access or compromised one of your machines, then the Jellyfin traffic is the least of your problems. Pick your battles. What's the worst that could happen here - someone gets to know your favorite show?

They do, because if ProtonVPN blocks LAN connections then the only other option is exposing the server to the WAN

Ah, I see. On your PC you should just be able to set a static route over the physical interface for 192.168.0.0/24 (or whatever your local network is) which takes precedence over the VPN. For android.... Oof, no idea. Probably need root.

What are you talking about. Please clarify if this is actually true:

I don’t plan to access it anywhere but home.

This would mean that you only want to access Jellyfin when you, and the device you are watching your show/movie on, are at home, where the Pi/server also is.

Is this correct?

If so, then questions about VPN, Certificates, DNS,.... do not matter.

1. host Jellyfin on the Pi, e.g. with IP 192.168.10.20 on your local network
2. open the Jellyfin app on your TV/Phone/PC, connect to http://192.168.10.20:8096/
3. done

Now you can access it at home, and only at home. I honestly fail to see where a VPN would even come into the equation here (again, if you wish to ONLY watch when you are at home, as you've said).

Yeah, true. I think there's no way around being pushy/almost manipulative.

"I fortunately no longer have WhatsApp. Especially with things concerning our children, I would NOT trust Facebook with that. I am completely open to using something else, does not have to be Signal - do you use any secure and private messenger apps where we can create a group?"

It's an uphill battle for sure. And you have to think about and set your own limits. I hate using WA, but for some contacts, it's better than having NO contact.

Hm, I don't have too many of those. The one large one I have was on Signal already, but that's mostly luck.

If it's a >10 people group that has already been established on WA, you're probably out of luck. If a group has not been established yet, your best bet is probably to be super proactive: "Yes, good idea, let's do make a group! Here, I've set up the Singal group, just scan this QR code to join! Oh, you don't have signal? Oh, nevermind, it's super quick to set up, and then you can simply join via the QR! I'd really hate to see you not be part of the group chat, but of course it's up to you if you want to join..."

Most of them. Family is fully on Matrix/Signal/Threema. Close friends are all on Signal. Some acquaintances are still WA-only, but I've stopped telling people that I have WA/Telegram, so new contacts are Signal/Matrix/Threema only.

Huh, didn't know. Thanks. I guess Hetzner is the right answer in both cases then 😄

Do you want all of that to be managed (DB, mailboxes, web-hosting,...) or just reliable hardware in "the cloud"?

For the latter, Hetzner.

Yeah!! A house only has speculative value! There's no fundamental value in a house! Just like bitcoin, if you can't sell your house, it's worthless!

.. .what do you mean, "a place to live in"?

The title gave me a stroke

What's wrong with the pillows? I only have one (+ my SO has 1, but those two are not stacked)