Emby SSL with Asus router or VPN

[MSI2017 48]

Hi all,

I'd like to secure my emby server a bit more. I have an Asus router and enabled DDNS and set emby on 'handled by reverse proxy' but still says 'not secure' unfortunately. Alternatively I'd like to have Emby run over a VPN in Windows (as the only program)

 

Anyone have a suggestion? I have also followed the existing Emby Asus SSL guide on the forum but that also didn't work for me.

[MSI2017 48]

Hi all,

 

I'm configuring emby to run through cloudfare. Unfortunately I cannot seem to get it working quite right. Here are the steps I did below.

1. I bought a domain on cloudfare
2. Went to DNS management and added an A record named emby with content being my wan IP
3. Went to SSL, Origin server and got myself the certificate which I converted to the required PKCS #12 file
4. Went intro router settings and added the following
5. Went into emby and put in the following where the red marked domain is emby.[mydomain.com]
6. Checked if the ports are open on canyouseeme and 443 is open adn reachable on my wan IP
7. Tried if the app works (it does but no way of telling if it using a secure connection)
8. Tried putting in [wanIP:443] and got into the server but with this:
9. Tried  [emby.mydomain] and it works with a secure connection (whilst writing this I'm retracing all my steps and now it connects but 15 minutes ago it didn't work and I didn't change anything.
10. Checked the analytics in cloudfare and the traffic is visible, however even after some vide watching and scrolling tru some 24megapixel pictures the bandwith counter is still at 2,6MB, is that normal or should I see al the bandwith used?

So in conclusion, it seems to work now when it didn't when I started writing this, despite me not changing anything? Will it continue to work or is there an error somewhere? I'd also like to know if the app is connected securely since going directly to my wan ip and emby connected unsecurely.

If my configuration is correct tho this might help other.

 

Cheers!

Edited November 15, 2021 by MSI2017

[Carlo 4561]

Hi, did you install a reverse proxy and configure it correctly for use with Emby?
If not, you can't use the "handled by reverse proxy" option.

If not using a reverse proxy you would need to secure a cert and then import it into Emby which can handle this directly.
Certbot or Certify will be your friend in this case.

I would Google or look at Youtube videos for how to use those programs.
It's a bit of a learning curve.

[MSI2017 48]

40 minutes ago, cayars said:

Hi, did you install a reverse proxy and configure it correctly for use with Emby?
If not, you can't use the "handled by reverse proxy" option.

If not using a reverse proxy you would need to secure a cert and then import it into Emby which can handle this directly.
Certbot or Certify will be your friend in this case.

I would Google or look at Youtube videos for how to use those programs.
It's a bit of a learning curve.

I've done it via cloudfare now, but still experiencing some issues where the emby logo keeps snowing but the webpage isn't loading, even though the app works perfectly. It's on my most recent post. 

[MSI2017 48]

Update, I'm having the issue described at step 9 again where it hangs on the emby logo. 

[Carlo 4561]

Not sure I follow.  What do you mean exactly?  Is this the login page?
If yes, that would indicate you have something setup wrong in Cloudflare (options) that Emby doesn't like.

You can try turning on dev mode in Cloudflare to see if Emby loads properly.

[Luke 42083]

Merged topics since it looks like we're having the same conversation in two places. Thanks.

[MSI2017 48]

2 hours ago, Luke said:

Merged topics since it looks like we're having the same conversation in two places. Thanks.

The first topic can be dismissed, not using the asus router ddns option anymore.

[MSI2017 48]

3 hours ago, cayars said:

Not sure I follow.  What do you mean exactly?  Is this the login page?
If yes, that would indicate you have something setup wrong in Cloudflare (options) that Emby doesn't like.

You can try turning on dev mode in Cloudflare to see if Emby loads properly.

This is what I mentioned at step 9. yesterday it worked and logged right in after this page, now it just hangs here despite the app working. What exactly do you mean with cloudfare dev page?

[Carlo 4561]

It's on the righthand side of the page.

If things start working correctly when you turn on Dev mode then it's a configuration issue on Cloudflare.
I could remotely help you configure this in 5 minutes or so if Dev Mode fixes your issue.

Let us know.

[MSI2017 48]

57 minutes ago, cayars said:

It's on the righthand side of the page.

If things start working correctly when you turn on Dev mode then it's a configuration issue on Cloudflare.
I could remotely help you configure this in 5 minutes or so if Dev Mode fixes your issue.

Let us know.

Turned it on and it started working, but after switching it back off it kept working. After restarting the server it stopped working again. Can it be there is huge delay between cloudfare and emby?

 

Turning on dev mode makes it work again

Edited November 16, 2021 by MSI2017

[Carlo 4561]

No, it's a configuration issue where you haven't set up Cloudflare properly to work with Emby.
Things like any type of "minify" needs to be off, "rocket" needs to be off.
You need to setup your page rules.

Take a look and see if you have any of those on and if so turn them off.  Then flush the cache which should be above the dev mode you already found.
If you can't figure it out send me a PM and I'll gladly give you hand with this.

Carlo

[MSI2017 48]

Problem is solved, @cayars logged in and fixed the issue. Thanks again for the help!

[Luke 42083]

Thanks for the feedback.

[Carlo 4561]

Not sure exactly what the issue was but I just ran through the different Cloudflare pages setting thing to what I know works well with Emby.
Then purged the cache on Cloudflare as well as a <CTRL>F5 in Chrome/Edge to clear the cache and he's back in business.

Tested from my location as well.