Leaderboard
Popular Content
Showing content with the highest reputation on 05/15/21 in all areas
-
Never mind, I decided to take the plunge and bought a lifetime sub. All options are now available. And from what I've tested so far, it's working brilliantly! This, in combination with the Live TV stuff that appears to be a hell of a lot more flexible than PLEX's offering, is making me a happy camper.4 points
-
Again personal but I'd always put a server or other device/computer on the network via Ethernet cable to leave the WIFI open for clients to use. I also use Ethernet for clients whenever possible as well as it's just a more reliable connection method. In a nutshell, the more clients/devices you can get off WIFI the better it is for those devices/clients that need to use WIFI.3 points
-
Te lo digo en Español peor es lo mismo que te ha dicho el amigo @Luke la única forma de actualizar a la nueva versión es reinstalando en cima de la versión vieja. Tranquilo que no se pierde ninguna confirmación ni nada2 points
-
New beta version available. Basically, it's the same version as last experimental version with some minor bugfixes.2 points
-
I used to think I was obsessed with my media libraries but now I have run into so many folks creating acquiring "special" artwork and metadata for most/all files in their library that I now believe that I have almost no obsession with my media at all. This thread, once again, has emphasized just how stable and free of obsession I am. I would never even remotely consider that my media needs any added info that Emby does not provide. But, then again, I "might" be insane in a different way. Remember: Insanity is just a state of mind. No less or more valid than any other state. And, for the people that believe I am insane: You’re Just Jealous Because The Voices Only Speak To Me.2 points
-
Can we have an option to flatten series if there are XX episodes or less. Just provides the ability to eliminate one frustrating click. I wouldn't want it on my 1,000+ episode Looney Tunes series. However, when you only have one or two seasons in a series, it helps drill down easier.1 point
-
Hello, I just made a Chrome Extension for this. It of course doesn't have full functionality like the real feature would and it only works in Chrome but I though some of you will still find a use in it. Here is the Github: https://github.com/Quadrubo/emby-sync-watch Here the Thread I made in the Forums:1 point
-
Podnapsi subs plugin is open sourced and does not have a plugin page, you can check how it's done here: https://github.com/MediaBrowser/Podnapisi/blob/master/Podnapisi/Plugin.cs1 point
-
I would compare to the post sent by the web app and then adjust yours to match.1 point
-
Hi, I would use the chrome debugger to look at what the metadata editor is doing in the beta server.1 point
-
Hi, can you try updating to 3.1.94 and see how that compares? Thanks.1 point
-
Welcome. Let us know if we can help with anything else. Thanks.1 point
-
1 point
-
1 point
-
If your audio setup doesn't support DTS (for example) and also doesn't support a multi-channel PCM input (only the Shield connected to appropriate receiver will I believe) then a DTS track would end up as just stereo when locally decoded. So, if you want surround sound in that situation, you turn on the option to convert to DD and you get much better sound.1 point
-
Unless all your movies are mp4 or mkv with audio codecs of H.264 and a very common audio track like AAC or AC3 you're going to need transcoding support on the server. That to me make using a RPi a bad choice. However if all your media is able to be played back directly from your LAN then it can do a good job.1 point
-
Everything in Emby is organised through the server. Some clients can download specific media for offline use, subject to their own storage capability, and a few can stream directly from storage, but only once set up by the server. So no, what you describe is not possible. Note also that Emby does not use IMDB - it costs too much. However, it can use IMDB ids to look up in other databases such as TMDB which accept them for lookups. Paul1 point
-
they are small but mighty , they have 2 pcie express ports so an Nvidia GTX 1050 Ti can fit fine, but will cover the second slot, I had a nvidia quadro p400 that was working perfectly. For some reason my tvx473 had a closed pcie port so i had to open it with the help of some tools, thankfully it worked, but it was all done for nothing now thanks for your support anyway softworkz1 point
-
Hi, actually no: 1.) I have restarted Emby on NAS 2.) I cleared cache and data on Android app, so it started from scratch. 3.) I logged in to my server 4.) I changed the download location to external then 5.) I started the download So I think orders of operations were fine.1 point
-
Provider gets in touch with a rep at the station to get them setup to send programming info. For us, we wait.1 point
-
Eureka! Default I.P. address in the config.ini was still set to 0.0.0.0 instead of the I.P. address the service was running on. So far this is pretty sweet and best of all, legal! If anyone has had success setting this up as a service using NSSM I'm all ears. I've got it to successfully install, but once Windows attempts to start it, it fails and says it gives no reason.1 point
-
So this is cool! I'm running the Unifi Controller on a Raspberry Pi 4. It has a small screen that will load a kiosk view of the dashboard in chrome browser. It sits inside the network box I have a new USG showing up, and two new Unifi switches. And.. I am finally ready for paint!1 point
-
@chef I really like the images for movies, tv shows etc. Are they available anywhere? Thanks!1 point
-
1 point
-
For those interested in soundiiz: https://emby.media/community/index.php?/topic/82563-emby-now-available-on-soundiiz1 point
-
There have been a few posts around the Forum recently regarding SSL, HTTPS and Security. I'm by no means an expert on reverse proxies but have had alot of dealings with them over the past few months and with the help of @@pir8radio and @@shorty1483 have a fairly well setup and secure system to access my services from outside of my LAN. This guide is to help people access their Emby Server and any other services behind a reverse proxy. This is based on NGINX but it also works for Apache and IIS. So firstly, what is and why do i need a reverse proxy? If you’re like me and have many services running on servers or PCs in your home, i.e. Emby, Plex, Sonarr, Radarr, Ombi, Organizer, CP, home automation, CCTV and anything else. Then you have to open multiple ports on your router to direct traffic to where it needs to go. With a Reverse Proxy you only have to open 1 or 2 ports. Normally all HTTP traffic is sent over port 80 and HTTPS traffic over port 443. In my case I want all traffic served over HTTPS and port 443 so I close all ports bar 443. Another reason to use a reverse proxy is that you can use your own domain certs easily and fine tune your security settings. If you want to test your Domain security go here - https://securityheaders.io/ Chances are your rating will be an F. with reverse proxy you can easily attain a B+/A Grade. You can also setup a web faced server running NGINX and then have additional servers behind that hidden on your LAN, however if your like me I have NGINX running on the same machine as emby. I only access Emby remotely do i still need a reverse proxy? Difficult to answer. No you dont need a reverse proxy to access Emby, but if you do then you can fine tune the security. This guide assumes you have a Domain name, your own Certs to go with your domain name and either have your domain name pointed to a static PC (your home WAN IP) or have Dynamic DNS setup. Have I convinced you yet? I run Windows OS at home so this guide follows a Windows setup but the config will be the same across all OS. 1. Download the latest version of NGINX from here - http://nginx-win.ecsds.eu/ as of writing this guide its version 1.13.0.1 Violet. 2. Extract the ZIP file somewhere easy to find. C:\NGINX. a. To make future updating easier when you extract the ZIP the file is called nginx 1.13.0.1 Violet. Rename it to just NGINX. 3. Before we get started on the config of NGINX lets install it as a service. a. Download NSSM b. Extract the ZIP c. Copy correct x86 or x64 nssm.exe to C:\Windows\System32 d. Open a CMD, type ‘nssm install nginx’ e. Fill in the Application Path – C:\NGINX\nginx.exe Startup directory – C:\NGINX Service name – NGINX. Install Service Don’t Start the service yet, we need to configure NGINX. To create a config I use notepad++. I will go through each setting first before supplying a copy of my current config. This is how the config starts. worker_processes 2; events { worker_connections 8192; } http { include mime.types; default_type application/octet-stream; server_tokens off; sendfile off; gzip on; gzip_disable "msie6"; gzip_comp_level 6; gzip_min_length 1100; gzip_buffers 16 8k; gzip_proxied any; gzip_types text/plain text/css text/js text/xml text/javascript application/javascript application/x-javascript application/json application/xml application/rss+xml image/svg+xml; tcp_nodelay on; server_names_hash_bucket_size 128; map_hash_bucket_size 64; ## Start: Timeouts ## client_body_timeout 10; client_header_timeout 10; keepalive_timeout 30; send_timeout 10; keepalive_requests 10; ## End: Timeouts ## } This part is fairly standard. anything starting with # is disabled or just a comment. The config is broken down into blocks. the first block here is the HTTP block. The HTTP block contains all the headers required to do the work of the reverse proxy for example when someone browses to emby.mydomain.com it matches a header in NGINX and it knows where to forward the data. The only change in the section above over a default config is the addition of server_tokens off; this is the first of our security tweaks. This removes the version of NGINX from being visible outside your network and less chances of attackers being able to exploit version weaknesses. ## Default Listening ## server { listen 80 default_server; listen [::]:80 default_server; server_name _; return 301 https://$host$request_uri; } This next block is called a server block and it nested inside the HTTP block. This block is optional, it is only used to redirect any users from HTTP to HTTPS if you want to force users on HTTPS only. listen 80 and listen [::] 80 are default ports for HTTP traffic for IPv4 and IPv6. return 301 https://$host$request_uri; is what rewrites the request from HTTP to HTTPS. Again only needed if you are forcing everyone to use HTTPS only. ##EMBY Server## server { listen 80; listen [::] 80; listen [::]:443 ssl; listen 443 ssl; server_name emby.mydomain.com; ssl_session_timeout 30m; ssl_protocols TLSv1.2 TLSv1.1 TLSv1; ssl_certificate SSL/cert.pem; ssl_certificate_key SSL/private.key; ssl_session_cache shared:SSL:10m; #add_header Public-Key-Pins ' #pin-sha256="8TzXdhbnv+l6EjDG2Vj9EmgGiSmZenrTZSNaUFEwyUE="; #pin-sha256="YLh1dUR9y6Kja30RrAn7JKnbQG/uEtLMkBgFF2Fuihg="; #pin-sha256="Vjs8r4z+80wjNcr1YKepWQboSIRi63WsWXhIMN+eWys="; #max-age=86400; includeSubDomains'; add_header X-Xss-Protection "1; mode=block" always; add_header X-Content-Type-Options "nosniff" always; add_header Strict-Transport-Security "max-age=2592000; includeSubdomains" always; add_header X-Frame-Options "SAMEORIGIN" always; proxy_hide_header X-Powered-By; add_header 'Referrer-Policy' 'no-referrer'; add_header Content-Security-Policy "frame-ancestors mydomain.com emby.mydomain.com;"; location / { proxy_pass http://192.168.10.10:8096; proxy_set_header Range $http_range; proxy_set_header If-Range $http_if_range; proxy_set_header X-Real-IP $remote_addr; proxy_set_header Host $host; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; #Next three lines allow websockets proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; } } The next server block is where the magic happens. First the listen 80; and listen [::] 80; are only needed if you want to allow users to access your emby server on port 80. otherwise delete these 2 lines to force all users to HTTPS access. Listen 443 ssl; and listen [::] 443 ssl; are the default HTTPS ports again for IPv4 and IPv6. server_name emby.mydomain.com will be your subdomain and how you access emby from outside your network. Now lets look at the SSL certificates, for my setup I created a .pem file. this file contains both my cert, intermediate and CA root cert in one file. This link gives you an idea how to do it - https://www.digicert.com/ssl-support/pem-ssl-creation.htm you should now have your cert.pem and a private.key file. for simplicity copy these files to C:\NGINX\conf\SSL (you have to create the SSL folder) This tells NGINX where to find the certs. ssl_certificate SSL/cert.pem; ssl_certificate_key SSL/private.key; For now I am going to skip over the #add_header Public-Key-Pins - as you can see i have it disabled by using # in front of it. I will explain why later on. The next section adds further security tweaks, you will need to change the content-security-policy domain names to your own. you need to list all your subdomains i.e. sonarr.mydomain.com radarr.mydomain.com emby.my....... you get the idea. add_header X-Xss-Protection "1; mode=block" always; add_header X-Content-Type-Options "nosniff" always; add_header Strict-Transport-Security "max-age=2592000; includeSubdomains" always; add_header X-Frame-Options "SAMEORIGIN" always; proxy_hide_header X-Powered-By; add_header 'Referrer-Policy' 'no-referrer'; add_header Content-Security-Policy "frame-ancestors mydomain.com emby.mydomain.com;"; The next part is called the location block. This is what tells your domain name emby.mydomain.com where the data should go. In this case it forwards everything to proxy_pass http://192.168.10.10:8096 you can also forward to proxy_pass http://127.0.0.1:8096 if it runs on the same box as NGINX. the rest of the location block is default stuff to help the data get to where it is needed. Your Config should now look like the one below. we need to save it to C:\NGINX\conf and name it nginx.conf worker_processes 2; events { worker_connections 8192; } http { include mime.types; default_type application/octet-stream; server_tokens off; sendfile off; server_names_hash_bucket_size 128; map_hash_bucket_size 64; ## Start: Timeouts ## client_body_timeout 10; client_header_timeout 10; keepalive_timeout 30; send_timeout 10; keepalive_requests 10; ## End: Timeouts ## ## Default Listening ## server { listen 80 default_server; listen [::]:80 default_server; server_name _; return 301 https://$host$request_uri; } ##EMBY Server## server { listen [::]:443 ssl; listen 443 ssl; server_name emby.mydomain.com; ssl_session_timeout 30m; ssl_protocols TLSv1.2 TLSv1.1 TLSv1; ssl_certificate SSL/cert.pem; ssl_certificate_key SSL/private.key; ssl_session_cache shared:SSL:10m; #add_header Public-Key-Pins ' #pin-sha256="8TzXdhbnv+l6EjDG2Vj9EmgGiSmZenrTZSNUFEwyUE="; #pin-sha256="YLh1dUR9y6Kja30RrAn7JKnbQG/utLMkBgFF2Fuihg="; #pin-sha256="Vjs8r4z+80wjNcr1KepWQboSIRi63WsWXhIMN+eWys="; #max-age=86400; includeSubDomains'; add_header X-Xss-Protection "1; mode=block" always; add_header X-Content-Type-Options "nosniff" always; add_header Strict-Transport-Security "max-age=2592000; includeSubdomains" always; add_header X-Frame-Options "SAMEORIGIN" always; proxy_hide_header X-Powered-By; add_header 'Referrer-Policy' 'no-referrer'; add_header Content-Security-Policy "frame-ancestors mydomain.com emby.mydomain.com;"; location / { proxy_pass http://192.168.10.10:8096; proxy_set_header Range $http_range; proxy_set_header If-Range $http_if_range; proxy_set_header X-Real-IP $remote_addr; proxy_set_header Host $host; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; #Next three lines allow websockets proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; } } } And thats it, you can now start your NGINX services by running services.msc and starting NGINX.1 point
