My proposal is a setting in the Emby client apps to set custom proxy headers like e.g. in Immich, Conduit or Embywatch.
Currently you need to open a ton of paths likeĀ /emby/web/* orĀ /emby/Items/* to be able to use an Emby app from the outside of LAN via Reverse Proxy with an authentication layer in front of Emby.
Pangolin/Traefik Reverse Proxy is used in this example:
You would set up the custom proxy header "P-Access-Token: xxx" and "P-Access-Token-Id: yyy" inside the Emby app and it c