Leaderboard

Just my annual bump for this. Thanks

MUHAHAHA, I got it working now! Thanks for all the help! After scanning my Drive 1, it found some bad sectors and now it's up and running like normal! That's probably the last time I'll work on soldering items. Turns out I'm not very good at it. But a good experience to figure that out. Yay success! Thank you for all the help everyone!

It will be defaulting to off going forward in 4.7.

You have to understand that we (Emby) have no control of or even knowledge of your private server users. So anything like this will require some setup and maintenance on the individual server owner's part. Plus, Implementing a security measure that only works on one specific platform would be a waste of time for sure. If it cannot be enforced system wide, there really is no point. But this is a digression from this discussion so we should just end it there.

I'd really like to have 2 Factor Authentication added to the login screen. It's just this (optional) extra layer of security to help secure the server (which, especially if people use camera uploads) contains pretty private data. There are for every type of programming language quite a few libraries available, so implementation on a server shouldn't be too hard to realise

Hey Everyone, My journey from Plex to Emby has been pretty smooth with the exception of setting up SSL encryption. There are lots of great posts on this forum and elsewhere on how to do this, and I consider myself pretty computer literate. But I'll be honest, this was a bit overwhelming for me as I have no experience at all in hosting web servers, DNS, or encryption certificates. After many hours, I've got it all working, so I thought I'd share what I've learned. I'm going to try to write this for the newbie, so don't be offended if it seems like I'm explaining lots of simple stuff. That's really what I needed a week ago, so maybe it'll help someone else in my shoes. Also, this is for Windows, although most of it applies to any OS. There's lots of text, but it's really very easy. Let me also say, I understand that a reverse proxy gives you lots of benefits and flexibility for securing your server. But that was a step too far for me. If you want a reverse proxy this post is not for you, but there are many posts in this forum to help you. If you want to access your Emby server from outside your home network you will want to require secure connection mode for all remote connections (see "Network" tab in Emby server configuration). To do this you need an SSL certificate. To get an SSL certificate you must have your own registered domain name. Here's a step-by-step. Domain Name Registration A domain name is the readable text part of a web address. So emby.media, or google.com, or media.yourdomain.net. Most home users don't have one, but you need one to get an encryption certificate. While (Edit:)There are many options for purchasing a domain (godaddy.com being very popular), I chose to buy my domain from domains.google. It cost me $12/year, and this is the only cost to getting your Emby server working with encryption. Go to https://domains.google, pick a domain, pay your money, and you're ready to go. For the rest of this discussion let's say you registered the domain name yourdomain.net. Now you need to associate your new domain with your home IP address. Most home users get their IP address assigned to them by their internet provider and it is "dynamic," meaning it can change. So you need to be able to tell your domain provider what your address is and update it when it changes. This can be done automatically, and is called dynamic DNS (DDNS). (Edit:) Before obtaining a domain, ensure the provider supports Dynamic DNS. Google domains supports this easily, here is the help page explaining how to set it up. Fortunately, my ASUS router has this capability built in so it was easy, but it's easy even if your router doesn't (follow google's directions). (Edit:) In case you have a static IP (obtained from your ISP), DDNS support is not mandatory. That's it for domain name registration. Now yourdomain.net points to your home network IP address. SSL Certificate Now you need to get an SSL certificate. This has the encryption keys you need, and must be issued by a recognized certificate authority or it gets blocked by your browser. Lets Encrypt will give you a free SSL certificate but it has to be renewed every 90 days. This was the part I was most confused by, but it's actually really easy. The part to understand is that Lets Encrypt must have some way of proving you own your domain name before they can issue you a certificate. There are two options, 1) they give you a little text file to place on your web server in a certain location. I don't have a web server so this is a no-go. 2) They give you a text string to add to your DNS registration in what is called a "TXT Record." You do this with google domains, it's very easy. To get a certificate you need an ACME client program that knows how to talk to the lets encrypt server. They recommend certbot, but it doesn't work in windows. Dig enough and you'll find ZeroSSL, they have a nice downloadable program that does it all and is really easy. Download here. Make a directory on your computer (I used c:\ZeroSSL). Put the le64 (or 32) exe in this directory. A single command will create your certificate. I think the easiest way to do this is create a text file in the same folder as the program, call it "get_cert.bat" and put the following three lines of text in the file. Edit the second line to have your actual domain name (instead of "yourdomain.net"), and to have your actual password for your PFX file (whatever you want it to be, just replace "yourpasswordhere" in the code below. @[member="Echo"] off le64 --key account.key --csr domain.csr --csr-key domain.key --crt certificate.csr --domains "yourdomain.net" --generate-missing --handle-as dns --export-pfx “yourpasswordhere” --live pause Save the text file as get_cert.BAT and then double click it to run. This runs the le64 program, creates the public/private key pair, asks lets encrypt to generate a certificate, saves that certificate, and converts it to a PFX file format that Emby requires. All in one command! When you run this, a command window will appear and you can see what it's doing. After a few seconds it'll pause and ask you to place the TXT record in your domain. It gives you a name and value, the name will be something like _acme-challenge.yourdomain.net, and the value will be a bunch of random letters and numbers. The program pauses here for you to put this into your domain. So now you just log in to your google domain again, go to "DNS" on the left menu, scroll all the way down and enter a "Custom Resource Record." The type is TXT, the name and value are what le64 gave you. Put them in, wait a few minutes for the change to take effect (took just a couple of minutes for me). Then go back to the command window where le64 is running and press enter to continue. It'll then verify your TXT record is there and issue your certificate. You'll find a file certificate.pfx in the le64 directory, that's it! Emby Setup Now log in to your Emby server setup. Go to "Network," in the field "External Domain" you put your domain name, so yourdomain.net or whatever you chose. For "Custom SSL certificate path," browse to the .pfx file that was created by the le64 program. In the "Certificate Password" field put whatever password you used in the .BAT file above when you created your certificate. Then for "Secure Connection Mode" I recommend you choose "Required for all remote connections." You also have to log in to your home router and forward port 8920 to the computer running your Emby server. I'm not going to give directions on how to do this, it depends on your router, but it's super easy. That's it. You need to restart your Emby Server, and then you're done! You can now access your server remotely and securely at https://yourdomain.net:8920. Certificate Renewal Now, I mentioned before that the Lets Encrypt certificates are only good for 90 days. So every 90 days you have to renew the certificate. Take that "get_cert.bat" file you made earlier and make a copy of it called renew_cert.bat. At the end of the second line, just add the text "--renew 20" (without the double quotes). When you are within 20 days of your expiration date run this file, it'll renew your certificate. I believe it'll ask you to place a new TXT record in your domain, so certificate renewal cannot be made fully automatic. You'll have to run it manually and add this TXT record into your google domain just like when you created the certificate in the first place. But it takes just a few minutes and then your certificate is renewed. You'll have to restart your Emby server for it to take. The file locations all stay the same, so you don't have to update anything in the Emby setup, just restart Emby. That's it! Well, I hope this helps someone. Sorry for the long post. I would have benefited from this level of detail a week ago, so maybe it'll be good for someone. If anyone sees something wrong here, feel free to correct me.

Mostly pertains to m4b but I have seen tags on mp3 files that have time stamps you can jump around in too. Can pm if example needed.

What client? Didn't know there was a client that had a default bitrate that low. Thought they were all 1.5Mbps or 3.0Mbps.

I am a bit late to the problem, having just discovered Emby. I would gladly pay for a lifetime subscription if I knew that Emby cared about AppleTV users, but it appears that they do not. To have a basic feature like this sit untouched for four years is crazy.

Believe this is what you are looking for. https://1drv.ms/u/s!AsqUaOWtBbAhm0ycr-iqNBAFCkao

What that supposed to mean? We welcome feedback as you already know, but remark like that is not acceptable at all, at least for me.

This appears to be fixed in .68 beta from my testing.

Found it. It is set to auto update every 24hrs

Thanks for the positive comments, and I'm glad it worked so well for you and that my post was easy enough to follow. I've learned a lot from these forums and am glad that I was able to add a little to the body of knowledge available here. Thanks!

When I have another replace I will let you know. I think kodi was not running I have another kind of strange behaviour: When I start kodi some of the artworks for movies in the unseen mvoies section are missing. When I move over the movie the artworks loads, but disappears as soon as I move to another movie. Playing a movie and then stopping it triggers a reload of this section and all movies have artworks. Sometimes this refresh also happens when the emby plugin syncs jsut after kodi startup and the section is refeshed. If this happens all artwork is where it should be. Here is a video of what I just tried to explain

Legend I had missed the minus(-)

To add, you can also setup a DLNA 'user' with limited access for example, and then make that the default DLNA user in the DLNA settings. But as Paul says, it if don't want it at all - then simply turn it off entirely Personally, I think it should default to off - as this is a simply access workaround for anybody with a DLNA client (ie Almost ALL devices..) ..

Presumably it's using DLNA. You can disable that in the server settings (and even uninstall the plugin that implements it). Paul

I also don't talk about emby connect. I just talk about having a own domain and an open port so you are right in the internet and most people don't have a own real firewall to take care of any security so they are just using their routers and nothing more Yes the 2FA is open for years this is just one point i am talking about.

Yay.... Looking forward to the next beta. I am currently running 4.7.0.25 (after update today).

You'd have to look at the folder permissions in Windows. Are the media folders read only?

so...... emby is the best media server for you.......? the online login and tracking of data by plex is a non-negotiable for most users here. there's currently nothing plex does over emby that would make me give that up

Definitely would like to see the watch list ! Seems like someone could almost copy and paste the favorites code and just make a few changes. I’m sure it’s more complicated than that but I would imagine that some of the programming to be reused

there needs to be a reaction on this forum that indicates IDGAF

We are sorry you are having an issue here (and we are still actively working with you on it) but this is simply not a fair statement. We understand you are having trouble but most users are not having any trouble playing this type of content. Issues that only occur for certain content or environments are the hardest to track down.

IPTV is cheap to buy for a reason, sloppy code slapped together no matter how it looks Emby fixes all their lazy sloppy mistakes making it look professional in the end. I feel like such a nerd for how much I like emby lol.

Please can we get Auto Organize to copy external subtitle files along with video files. The easiest solution is to just copy any files that are identically named as the video files and apply the same renaming logic to them.