Hosted Emby Security

[surfcu 0]

I have a dedicated server Quickbox and Emby installed.

I have my library on Amazon Cloud Drive encrypted using rclone which is working great.

 

I received an e-mail from my hosting company stating my server port 1900 vulnerability for DDoS attacks.

I beleive this is Emby DLNA, so I disabled it.

 

I want to disable http and allow only https.

Is it possible?

 

I disabled username listing using "Hide this user from login screens".

 

What are other security measures I can take for this kind of setup?

[Suspense 2]

You could probably remove the http port that emby listens to under advanced settings.

 

Alternatively, set up a reverse proxy and force http to https traffic on port 443, so the emby port is never exposed to the internet. 

[Luke 42085]

Yes that is only for dlna so that should be fine.