Zugriff auf Emby Server übers Internet sicher machen

[erzonk 21]

Im Thema zur Erreichbarkeit meines Emby Servers übers Internet bin ich auf das Problem der Sicherheit aufmerksam gemacht worden:

https://emby.media/community/index.php?/topic/143629-server-von-fremden-wlan-aus-erreichen/

Ich hab Kenntnisse in dynds, Ports und Weiterleitungen, aber wie man das ganze sicher gestaltet hab ich nicht.

Momentan habe ich einfach eine ipv64.net Weiterleitung auf den Synology Emby Server per http://xxxxxxxx.ipv64.net/8096

Das scheint eine Sicherheitsschwachstelle zu sein, die ich gern so gut wie möglich schließen möchte.

Wie gehe ich am besten vor? Kann mir da jemand mit Tipps oder links zu Anleitungen behilflich sein?

 

Vielen Dank und liebe Grüße

[Luke 42077]

Hi, what is the vulnerability?

[erzonk 21]

you can ready the Security isues in this Post:

https://emby.media/community/index.php?/topic/143629-server-von-fremden-wlan-aus-erreichen/#findComment-1480894

[Luke 42077]

You have to open a port to be able to access your server remotely. My suggestion would be to use a different port from the default, setup HTTPS on your server, and to make sure that your users have passwords.

[erzonk 21]

Ports are open. HTTPS wont work at this Moment. I have to deal with it. The HTTPS Port ist open in my router. But If intry tonreach the Server with the HTTPS adress i get an "Site ist Not available in Browser and an "Server is Not reachable" in Emby app .. I guess I need to divee deeper into the topic of HTTPS and certificates.

[erzonk 21]

After some tryouts and configerrors i setup my system like this:

1. I have set up a ddns at synology which can now be reached at the address https://phantasyname.synology.me

2. I then set up a reverse proxy in the Discstation that intercepts the requests under the domain mentioned above and forwards them to the local IP address 192.168.178.4:8096, which is Emby's unencrypted local address

3. In Emby I let the public ports for http (8096) and https (8920) as they are, okay?

4. In emby I entered https://phantasyname.synology.me under the external domain

5. under “secure connection mode” I set “managed by reverse proxy”.

6. In the Router I have set up port forwarding from port 443 to the Synology Discstation under port sharing. 

Is everything okay so far or is there something else wrong? 

 

I would be happy to receive a quick OK or suggestions for improvement. 

 

Thank you very much and kind regards

Edited October 25, 2025 by erzonk

[Luke 42077]

Quote

3. In Emby I removed the public ports for http and https, so the fields are empty

Hi, how did you do this? Having them blank is not even possible. You need to put values there.

[Luke 42077]

Quote

Is everything okay so far or is there something else wrong? 

That seems reasonable otherwise.

[erzonk 21]

8 minutes ago, Luke said:

Hi, how did you do this? Having them blank is not even possible. You need to put values there.

You are right. i checked it when i try to hit the save Button. So i filled the fields back wie the Standard Port for http and 443 for https 

 

Edited October 25, 2025 by erzonk

[erzonk 21]

i forgot to mentioned that i forwarded the 443 Port in the synology firewall to the local ip adress of the discstation 192.168.178.4

[erzonk 21]

it also works without that.