Emby on DSM with SSL cert and automatic renewal (reverse proxy)

[Blazejos 8]

Hi All,

I’m running my Emby on pretty old DSM 916+ behind my domain, it works flawlessly and I love it. Only issue I had was every 3 months my SSL cert had to be manually renewed, so I would export it from DSM (which has auto renewal) and import it on my Emby for convenient and secure remote use for me and my friends. With very helpful tips from chatgpt I’ve bypassed the manual SSL cert renewal task, and now my Emby is running only locally, while I still can watch videos via secure remote connection.

I’m sharing here in case others find it useful - I’m 10x more pleased with my Emby than with any other streaming service. 

The connection flow is the following: Emby app over the Internet -> my domain:Emby custom port -> my ext IP -> my NAS DSM local IP: DSM custom port -> Login portal /Advanced / reverse proxy and add rule: 

Description: emby

Source: https://your_domain:emby_port

Destination: http://localhost:8086 - (default Emby port)

Important note: remote access on Emby must be entirely disabled, otherwise it’s a conflict. Another fwd must be done on your router, to fwd all incoming connections on your emby port to your NAS IP on the same port. 

Now my Emby server “thinks” it’s running only on local network, while it is securely accessible from the Internet. I’m covering my domain address because it’s private use only. 

[Luke 42077]

Hi, thanks for sharing.