Search the Community

NGINX and emby Config Version 1.0.4 Last Update 1-1-2024 Update by Pir8Radio Why Use NGINX reverse proxy ahead of my application servers like emby? With NGINX or any reverse proxy ahead of an application server you have more control over your setup. You can do things the application servers were not built to handle, have better control over your security and logging, replace lines of code without editing the application server code, better control of caching, etc, etc.... One of the main reasons is so that you don't have to open a new port on your firewall for every application server you host, all you really need to open is 80 & 443 and the internet can reach all of your different servers through one entrance. Will NGINX work on my OS? Most likely, you can find various versions of NGINX for most OS's and they come in different flavors, with options baked in, or just the bare NGINX that you need to compile. See below for download links to get you started. Will NGINX break things on emby? Absolutely if you don't configure it correctly! I HIGHLY suggest when choosing a scheme to setup your domain URL you choose SUB-DOMAIN and NOT sub-directory, more below. Also if you come to the emby forum with things not working, or issues you have and you use a Reverse Proxy, PLEASE make sure that is one of the first things you mention in your forum post. ESPECIALLY if emby works on one platform or client, but not another. So many times people complain "but it works on chrome, so I didn't think it was the reverse proxy". Mention you have a Reverse Proxy please. If the reverse proxy is setup correctly it should be totally transparent to the user and the application server (emby). I'm not going to go into how to purchase and setup a domain name. Lots of how-to's on that out there. Once you have a domain name and its pointed to your IP address, you can go to that domain name and hit your server then continue on.... Sub-Domain vs Sub-Directory: Lets say your domain name is: domain.com there are two main ways you can direct traffic from the internet to your backend application servers like emby. One is sub-directory, something like domain.com/emby or domain.com/other-server This is doable in nginx, but there are some catches and you need to know how your reverse proxy and application server work in detail.. This often breaks different features in emby and other application servers.. To keep with our "Totally Transparent" goal sub-directory doesn't work well, it requires a lot of rewriting and work-arounds to make it work smoothly, if you choose sub-directory you will run into issues you will need to address. The other option is Sub-Domain, this is the cleanest, most transparent, easiest to setup and maintain, it's also what I highly suggest you setup. A sub-domain looks like: emby.domain.com or other-server.domain.com The below config is based on Sub-Domain I will include a sub-directory example as well. NGINX Downloads: Official nginx downloads(LINUX): nginx.org Official nginx downloads(Windows): nginx.org WINDOWS users I suggest this version: nginx-win.ecsds.eu download links are at the bottom of the page. This Windows version has lots of cool features compiled into it already, and is optimized for windows. They keep up with updates, its a FREE (for non-commercial) third party build that I highly recommend. Additional Links: Content Security Policy info (CSP) (For Advanced Users): A CSP WILL break your server if you don't know what you are doing, I suggest reading up, lots of googleing, and understand what a CSP's function is and is not prior to venturing into this area Example NGINX Reverse Proxy Config: 3-29-2020 - ADDED A LINE FOR CLOUDFLARE USERS SO THAT THE X-REAL-IP HEADER IS CORRECTED. THIS ONLY EFFECTS Cloudflare USERS. 4-11-2020 (V1.0.1) - MOVED proxy_buffering off; FROM LOCATION BLOCK TO SERVER BLOCK 12-18-2020 (V1.0.2) - ADDED 301 SERVER SECTION TO FORCE ALL TRAFFIC TO SSL. 9-23-2021 no nginx config change, but cloudflare changed how they cache video files, so emby users that use Cloudflare now need to add a rule like below to make sure video is seekable and playable. 8-18-2022 - added a line for photo sync to cover large uploads of videos and images. (client_max_body_size 1000M;) 1-1-2024 - changed http2 setting per @weblesuggestion in this thread post # 1309363. ** The below "Page Rules" are only needed for Cloudflare CDN users, otherwise ignore. worker_processes auto; error_log logs/error.log; events { worker_connections 8192; } http { include mime.types; default_type application/octet-stream; server_names_hash_bucket_size 64; server_tokens off; ## The below will create a separate log file for your emby server which includes ## userId's and other emby specific info, handy for external log viewers. ## Cloudflare users will want to swap $remote_addr in first line below to $http_CF_Connecting_IP ## to log the real client IP address log_format emby '$remote_addr - $remote_user [$time_local] "$request" ' '$status $body_bytes_sent "$http_referer" ' '"$http_user_agent" "$http_x_forwarded_for" $request_time $server_port "$http_x_emby_authorization"'; log_format default '$remote_addr - $remote_user [$time_local] "$request" ' '$status $body_bytes_sent "$http_referer" ' '"$http_user_agent" "$http_x_forwarded_for" $request_time $server_port'; sendfile off; ## Sendfile not used in a proxy environment. gzip on; ## Compresses the content to the client, speeds up client browsing. gzip_disable "msie6"; gzip_comp_level 6; gzip_min_length 1100; gzip_buffers 16 8k; gzip_proxied any; gzip_types text/plain text/css text/js text/xml text/javascript application/javascript application/x-javascript application/json application/xml application/rss+xml image/svg+xml; proxy_connect_timeout 1h; proxy_send_timeout 1h; proxy_read_timeout 1h; tcp_nodelay on; ## Sends data as fast as it can not buffering large chunks, saves about 200ms per request. ## The below will force all nginx traffic to SSL, make sure all other server blocks only listen on 443 server { listen 80 default_server; server_name _; return 301 https://$host$request_uri; } ## Start of actual server blocks server { listen [::]:443 ssl; ## Listens on port 443 IPv6 ssl enabled listen 443 ssl; ## Listens on port 443 IPv4 ssl enabled http2 on; ## Enables HTTP2 proxy_buffering off; ## Sends data as fast as it can not buffering large chunks. server_name emby.domainname.com; ## enter your service name and domain name here example emby.domainname.com access_log logs/emby.log emby; ## Creates a log file with this name and the log info above. ## SSL SETTINGS ## ssl_session_timeout 30m; ssl_protocols TLSv1.2 TLSv1.1 TLSv1; ssl_certificate ssl/pub.pem; ## Location of your public PEM file. ssl_certificate_key ssl/pvt.pem; ## Location of your private PEM file. ssl_session_cache shared:SSL:10m; location ^~ /swagger { ## Disables access to swagger interface return 404; } location / { proxy_pass http://127.0.0.1:8096; ## Enter the IP and port of the backend emby server here. client_max_body_size 1000M; ## Allows for mobile device large photo uploads. proxy_hide_header X-Powered-By; ## Hides nginx server version from bad guys. proxy_set_header Range $http_range; ## Allows specific chunks of a file to be requested. proxy_set_header If-Range $http_if_range; ## Allows specific chunks of a file to be requested. proxy_set_header X-Real-IP $remote_addr; ## Passes the real client IP to the backend server. #proxy_set_header X-Real-IP $http_CF_Connecting_IP; ## if you use cloudflare un-comment this line and comment out above line. proxy_set_header Host $host; ## Passes the requested domain name to the backend server. proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; ## Adds forwarded IP to the list of IPs that were forwarded to the backend server. ## ADDITIONAL SECURITY SETTINGS ## ## Optional settings to improve security ## ## add these after you have completed your testing and ssl setup ## ## NOTICE: For the Strict-Transport-Security setting below, I would recommend ramping up to this value ## ## See https://hstspreload.org/ read through the "Deployment Recommendations" section first! ## add_header 'Referrer-Policy' 'origin-when-cross-origin'; add_header Strict-Transport-Security "max-age=15552000; preload" always; add_header X-Frame-Options "SAMEORIGIN" always; add_header X-Content-Type-Options "nosniff" always; add_header X-XSS-Protection "1; mode=block" always; ## WEBSOCKET SETTINGS ## Used to pass two way real time info to and from emby and the client. proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection $http_connection; } } }

I have 2 NAS in different physical locations: a DS718+ is the primary server, and a DS223 as an off-site backup. I am using ShareSync to backup the all the content on the primary to the remote, on a download only basis (identical folder/sub-folder structure & naming). I set Emby's metadata path to save to a shared folder on the primary NAS (separate from the media content itself), so it gets backed up to the remote also. I bit the bullet & signed up for Emby Premier, so I am using Emby's Backup Plugin to back up the configuration to a sub-folder in the same shared folder as the metadata. I haven't tried this yet, but I assume that if the paths/folder structure/naming & content are the same on both servers, if I do a restore from one of the configuration backups from the primary onto the destination, that Emby will "behave" the same way on both NAS's. Is this correct? Might there be any conflicts created by having the same server info active on 2 different NAS? I would not be running them at the same time. The backup would only be working as a server if the primary were down for maintenance, etc.

I've noticed every once in a while when I open the app, the server I was logged into is lost, same thing if I had multiple servers configured. I am then getting the login screen and need to reconfigure and login to my servers again. I saw similar posts 2 years ago but did not find a solution.

Hi, I've been using Emby for at least month on a temporary server and now consider buying premiere sub, there are some movie collections though that I configured myself, creating custom images, thumbs, description, etc. Will those images and descriptions carry over (if I have premiere sub) when I install Emby server on a dedicated linux server (using the same hdd, but obviously different os) and do backup and restore? OCD kinda kicks in and I really like how I organize my files. Thank you.

@pir8radio @pwhodges thanks for trying to help me I have converted Let’s Encrypt to work with emby directly without using Nginx Cer add to emby setting surf to my server and now working without any warning from the browser about the Certificate .. and the video payed as well. ok now when I try with the emby app, the video still give me an error. So it is not related with Nginx ... there is an issue with the app itself @Luke this issue only I have with Galaxy Note 5 The device is Galaxy Note 5 Android 7.0 emby 3.2.56 Server emby 4.7.5.0 (Ubuntu Linux 20.04.4) log file is attached please note that I have replace my domain name and IP to my_domain.com and my_ip on the log file Many Thanks embyserver.txt

I just got a new router, which means my server has moved from local IP 10.0.x.x to 192.168.x.x. I added exactly the same port-forwarding rules to the new router that I had in the old router, changed the local IP address in the NGINX config, restarted NGINX and...it doesn't connect. The domain gets a CloudFlare 524 error. My IP address followed by ports 80, 443, 4343, 8920 and 7241 fails. My IP address followed by port 8096 succeeds. This doesn't make any sense. I have Emby's ports in the network config set to 4343 for secure and 7241 for non-secure. CanYouSeeMe.org can only see me on port 8096. NGINX isn't jumping in front of any of the attempts at direct-IP access, which from memory it's supposed to.

OK so I really like the look and feel when using Kodi + Embuary Skin as the interface to Emby Server, which I am running in Windows 10. I could not find a great set-up guide, but managed to get it installed twice using this Youtube video: https://youtu.be/I8RsYObJb0Q by Ronnie Bailey. The first installation (with Kodi in Windows on my PC, the same one running Emby server) went fine, and looks like this (1st screenshot)., The second installation today (with Kodi on my Nvidia Shield) seemed to go OK, but after everything, it is not working exactly right. First, instead of seeing links to various episodes and movies on my home screen, it is mostly blank (or shows links to upcoming theater movies), and I have to go into the "Embuary" App. Then I can see a list of items like Favorite TV shows, Favorite Shows, etc - but clicking on them does not work. However if I click on TV shows (dynamic) and Movies (dynamic)- those work as I expect. Anybody know what I may have done wrong? Thanks in advance.

Lately the process to download images and metadata based on a successful manual "identify" is taking upward of 5-6 minutes, and the only client-side indicator is the spinning circle. Woudl it be possible to have more of a progress bar that shows the different stages? My suggestion would be - "searching" - Successfully Identified via [tvdb, imdb, etc] (or "failed to identify given search parameters" - Downloading Metadata - Downloading Cast Images - Downloading Cover art - Downloading Background (if applicable) - Populating.... ("Replacing Images" if checked)... Done! with a notification of a fail state and possibly the number of assets being downloaded (if the API for each individual site allows) Thanks

Hi! I'm noticing that the Configuration Backup task is consistently failing. This is the error in the logs (after running it manually): 2019-03-16 08:48:16.442 Info HttpServer: HTTP POST https://embyserver:8920/emby/ScheduledTasks/Running/a1e4a7962c72ac5e491497598d1ee479. UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.75 Safari/537.36 2019-03-16 08:48:16.446 Info TaskManager: Executing Configuration Backup 2019-03-16 08:48:16.446 Info HttpServer: HTTP Response 204 to 192.168.1.1. Time: 4ms. https://embyserver:8920/emby/ScheduledTasks/Running/a1e4a7962c72ac5e491497598d1ee479 2019-03-16 08:48:16.458 Info HttpClient: POST https://mb3admin.com/admin/service/registration/validate 2019-03-16 08:48:16.465 Error TaskManager: Error *** Error Report *** Version: 4.0.2.0 Command line: /share/CACHEDEV1_DATA/.qpkg/EmbyServer/system/EmbyServer.dll -programdata /share/CACHEDEV1_DATA/.qpkg/EmbyServer/programdata -ffdetect /share/CACHEDEV1_DATA/.qpkg/EmbyServer/bin/ffdetect -ffmpeg /share/CACHEDEV1_DATA/.qpkg/EmbyServer/bin/ffmpeg -ffprobe /share/CACHEDEV1_DATA/.qpkg/EmbyServer/bin/ffprobe -defaultdirectory /share/CACHEDEV1_DATA -updatepackage emby-server-qnap_{version}_x86_64.qpkg Operating system: Unix 4.2.8.0 64-Bit OS: True 64-Bit Process: True User Interactive: True Processor count: 4 Program data path: /share/CACHEDEV1_DATA/.qpkg/EmbyServer/programdata Application directory: /share/CACHEDEV1_DATA/.qpkg/EmbyServer/system System.NullReferenceException: System.NullReferenceException: Object reference not set to an instance of an object. at Emby.Server.Implementations.IO.SharpCifsFileSystem.IsEnabledForPath(String path) at Emby.Server.Implementations.IO.ManagedFileSystem.DirectoryExists(String path) at MBBackup.ServerEntryPoint.ExecuteBackup(BackupProfile settings, CancellationToken cancellationToken, IProgress`1 progress, Boolean isAuto) at MBBackup.Entities.ScheduledBackupTask.Execute(CancellationToken cancellationToken, IProgress`1 progress) at Emby.Server.Implementations.ScheduledTasks.ScheduledTaskWorker.ExecuteInternal(TaskOptions options) Source: Emby.Server.Implementations TargetSite: Boolean IsEnabledForPath(System.String) at Emby.Server.Implementations.IO.SharpCifsFileSystem.IsEnabledForPath(String path) at Emby.Server.Implementations.IO.ManagedFileSystem.DirectoryExists(String path) at MBBackup.ServerEntryPoint.ExecuteBackup(BackupProfile settings, CancellationToken cancellationToken, IProgress`1 progress, Boolean isAuto) at MBBackup.Entities.ScheduledBackupTask.Execute(CancellationToken cancellationToken, IProgress`1 progress) at Emby.Server.Implementations.ScheduledTasks.ScheduledTaskWorker.ExecuteInternal(TaskOptions options) 2019-03-16 08:48:16.465 Info TaskManager: Configuration Backup Failed after 0 minute(s) and 0 seconds Any ideas? I'd attach the full log but I don't think it's relevant in this case since there's an exact, isolated error with a stack trace. Feel free to correct me if I'm wrong, though... Cheers!

I set up Emby Server on my Synology DS218play and configured it to use my single HDHomeRun HDTC-2US dual-tuner device. Emby only uses one tuner in the device, and the Live TV configuration screen I see in the online documentation, which shows a multi-tuner configuration, is without any of those multi-tuner options. I looked everywhere throughout Emby's server settings and cannot find what I see here on GitHub: https://github.com/MediaBrowser/Wiki/wiki/Live%20TV#live-tv-status If I schedule two shows at the same time slot to record, Emby lets me do it, but only one of the two record. Here is all I see for Live TV... And, if I open up the HDHomeRun EXTEND settings... Emby is on the latest version 3.5.3.0. My Synology NAS is on the latest version DSM 6.2.1-23824 Update 2. My HDHomeRun is on firmware 20180817, which is the latest for the HDTC-2US with device ID 1050141D. Does anyone know how to properly configure Emby on a Synology NAS to recognize both tuners?

​Current setup is on the 8TB drive but would like to add a ssd drive for Emby and all those small files. My current setup doesn't have to many TB's yet so it will be a quick change over. What settings should I pay attention too?

Hi If one wants to run with a customised mpv.conf file. Where should this file be located to be picked up and where it is not overwritten by an emby update?

When I restored a backup created on Emby Server in Windows to an Emby Server on Linux, the watched status data for my users is there for movies & TV shows flawlessly. I keep my soccer videos separate in a Home Photos & Videos library. I noticed the watched status did not transfer. What factors could be leading to this? Is watched status tracked for this kind of library or should I be using a different type of library?

Hey Folks, Little Question: Is it possible to disable the logging of IP Address on the server? I have a few mates using it and i kind of feel a bit bad because i get their IP Addresses everytime they login. So is there any possibility to disable this? or could you kindly point me in the right direction to remove it in the code? I even tried to do a reverse proxy in front of the reverse proxy of my emby server to disgintuish the users ip, but it still gets it. So if you have any advice, i would be happy Greetings

Now that hardware acceleration is widely used, I need to suggest that inside user configuration can give permissions to HW or SW encoding separately. Why? Maybe I want to allow only HW encoding because I don't want CPU spikes everywhere... Or maybe somebody only desire SW encodings because sees more quality in it...

Bonjour, Après avoir découvert récemment emby (que je trouve excellent), je songe à monter un petit serveur emby, pour diffuser et streamer des films à mes autres appareils (TV, iPhone/iPad, ordinateur portable). Pour cela, je cherche une configuration qui soit la plus petite possible (format Intel NUC par exemple), et qui serait parfaitement silencieuse. Sachant que je ferai au maximum 2 streamings en parallèle, et le plus souvent 1 seul, quelle configuration matérielle est nécessaire (format 1080p) ? CPU (i5/i7), GPU (Intel HD 5000 / Iris 6100 ?), mémoire ? Y-a t-il des possesseurs de NUC ? D'avance merci de vos conseils. Carlos

Emby For Roku Setup Guide Assumptions The Author only had access to a Roku 3 (Model 4200X Software v5.4 2240) . It is assumed that all Rokus behave in the same way in respect of this guide.Prerequisites Install EMBY Server. Create an EMBY User. Optionally (and recommended) make user an EMBY Connect User (by registering on community forums and adding the valid MB community username to the user account under server configuration and authorising via email) http://emby.media/connect/ Follow the Roku product installation instructions to register your email address/Roku account. Ensure the Roku has a valid IP route to your EMBY server and ensure the necessary rules are applied on any intermediary firewalls. See Client<>Server Connection Troubleshooting. Guide Chapters Adding EMBY Channel to Your Roku. Connect EMBY Roku Client to EMBY Server Client<>Server Connection Troubleshooting. Note many of the pictures in this guide need updating for the latest version and new product name. Media Browser is now EMBY

Dear all, I have a project to setup a dedicated emby server, for streaming 1080p videos, to devices live a TV, an iPad or a laptop (no transcoding for the laptop). I looking specifically for a compact and quiet (fanless if possible) hardware configuration. I'm wondering about the Intel NUC. Does it provide enough power to perform 1080p video transcoding, assuming that I'll transcode no more than 1 video at a time ? Which configuration allows to transcode without lagging ? What CPU version (i5/i7) and/or the GPU (Intel HD 5000 / Iris 6100) are enough ? Does anybody have such an experience with NUC as emby servers ? Many thanks in advance. Regards, Carlos

Hi, I can not click the config button in Emby Classic for WMC. The WMC close, min and max buttons interfere with it.

I have lav filters, splitter, madvr etc in non-standard locations because I use K-Lite codec pack for m codec managemen. I have used it for years and am extremely happ with it, so I have no plans to go back to the bad old days of managing my codecs individually and worrying about what will break. The problem is the MBT Video player is hard wired to look for LAV splitter etc in the "C:\Program Files\LAV Fliters" path and not the path I use. All other players are fine with using the filters, splitter etc from their location, without any configuration, so is it possible to update it so it's "path agnostic"? I don't want to have multiple versions installed, it is just asking for trouble.

Hi all, So, I have been successfully using MB3 and server for a few months after converting from MB2. I just have a couple of things I wanted to see if I could work out with the help of others. 1) How do I make MB3 move to the next file automatically when a film is on 2 files? I have used the standard folder configuration as noted in the setup guides - for instance, I have folder: '\\mediaserver\Wrestling\Wrestlemania 30'. In this folder are files 'Wrestlemania 30 CD1' and 'Wrestlemania 30 CD2'. When CD 1 finishes it doesn't automatically switch to CD2. MB2 used to do this but I cant seem to find a setting for this. Can anyone throw some light on this? 2) How do I play extras? So, I have Blu-ray disk images (ISO) with mounting software and power DVD. I can play a disk fine but the setup guide advised to have the bonus disk in a folder called 'Specials'... so I have for instance this- '\\mediaserver\Movies\Lord Of The Rings, Two Towers' In this folder I have the ISO image of the film. and then a folder called 'Specials'. The specials folder has the ISO file for the bonus disk. How can I play this through MB3? I used MB3 classic if this helps and I use the Diamond theme (not sure if this is relevant). Anyways, any help on these will be appreciated. Thanks.

Hi @@Soultaker - I have noticed when I change the Configuration > Rush Options > Optimize for low fidelity extenders tick box on the extender that it changes the Configuration for the HTPC server as well...and vice verse. Is this the way it is supposed to work or do the two accounts have separate configuration files? Thanks