Any use of RAID0 needs to be thoughtful. You’re doubling the chance of complete data loss from a single drive failure. Can you get all the data on that setup back? For games that you can install off Steam or some other way, that’s fine. But be very careful of what you put on there.
Incidentally, caching servers are another good use case.
Otherwise, RAID0 is better used as a building block for more complex RAID levels, like RAID10.
It only goes as fast as the slowest component. NVMe SSDs often get bottlenecked by something else. You can find some comparisons out there where people are given blind tests of various setups, and they end up calling a SATA SSD the fastest one.
A few years back, when the difference in price between the two were larger, it was often suggested that the SATA version was good enough. It was hard to argue otherwise for real world experience. Now the price difference is small to non-existent, so just get the NVMe.
Dynamic DNS is the usual way. Your ISP assigns the IP, so they’re the only ones who can make it static.
You might be able to do it with some VPN shenanigans, but generally dynamic DNS is what you want. It’s basically a script that runs on your server that will periodically update the IP on the DNS entries.
Specifically these issues: https://github.com/jellyfin/jellyfin/issues/5415
The big one is that video/audio playing endpoints can be used without authentication. However, you have to guess a UUID. If Jellyfin is using UUIDv4 (fully random), then this shouldn’t be an issue; the search space is too big. However, many of the other types of UUIDs could hypothetically be enumerated through brute force. I’m not sure what Jellyfin uses for UUIDs.
Nah, setting non-standard ports is sound advice in security circles.
People misunderstand the “no security through obscurity” phrase. If you build security as a chain, where the chain is only as good as the weakest link, then it’s bad. But if you build security in layers, like a castle, then it can only help. It’s OK for a layer to be weak when there are other layers behind it.
Even better, non-standard ports will make 99% of threats go away. They automate scans that are just looking for anything they can break. If they don’t see the open ports, they move on. Won’t stop a determined attacker, of course, but that’s what other layers are for.
As long as there’s real security otherwise (TLS, good passwords, etc), it’s fine.
If anyone says “that’s a false sense of security”, ignore them. They’ve replaced thinking with a cliche.
That’s fine. I want to bring it up because this is a public forum, and it’s important that nobody tries this blind.