nartoo 1 Posted January 14, 2021 Posted January 14, 2021 (edited) Hi, I'm a bit of a newbie when it comes to SSL certification etc. I currently have Emby set up on my Elementary OS box. I have a static IP address, and port forwarding in place for both secure and non-secure access (the default emby ports 8096 and 8920). At present, I can gain remote access via the non-secure method, but not secured. Also, I have a domain through a local web hosting provider. What I'm hoping to do is have it set up so my Emby is accessible securely from emby.[mydomain].com. Can someone help me with how to do this with a free SSL certificate? Do I need to obtain a free SSL certificate through my web hosting company? Or get one from somewhere else and load it onto my Emby server box? I'm a bit confused as to how it all works with SSL certs etc. Thanks in advance Edited January 14, 2021 by nartoo
Solution Carlo 4561 Posted January 16, 2021 Solution Posted January 16, 2021 Yes you can do this. First thing you want to do is add an A or C record to your domain for "emby" with your REMOTE IP. You can do this right away and use it with port 8096 to make sure it works ie http://emby.yourdomain.ext:8096 Once you've got that work and have your emby.yourdomain.ext you can get a cert for this. Follow this KB article for this. https://support.emby.media/support/solutions/articles/44001160086-secure-your-server Feel free to PM me if you hit a snag or need assistance.
nartoo 1 Posted January 20, 2021 Author Posted January 20, 2021 18 hours ago, Luke said: @nartoo has this advice helped? Yes, it's working now! Thank you both so much! I've been trying to find the right info, and you pointed me in the right direction! The only follow-on question I've got is - is it possible for the remote link to be used without the port number? Eg. emby.mydomain.com as opposed to emby.mydomain.com:8920?
Carlo 4561 Posted January 20, 2021 Posted January 20, 2021 In a web browser YES but you have to change your port forwarding and the ports in Emby NETWORK menu. Web browsers use port 80 for UNencypted traffic and port 443 for ENcryped traffic. So if you switch over to using port 80 and port 443 you will no longer need to enter port number in a browser. Using either http or http will be enough as they will use the defaults of 80 or 443. The trick to this is to understand Emby itself will always internally listen on port 8096 and 8920. So you setup your port forwarding to: WAN IP/80 to Emby Server IP/8096 WAN IP/443 to Emby Server IP/8920 If that is not clear or you don't understand, send me a PM and I can remote in and help you with this. It's a 3 to 5 minute job to set this up. Add another couple of minutes as I explain it so figure on a 7 to 10 minute remote session if you need assistance. Carlo PS this is exactly how I run my personal system with port 80 and 443 but I use a domain name as well so a person can just type my domain in a web browser and connect which is very nice. Emby is AWESOME this way!
nartoo 1 Posted January 21, 2021 Author Posted January 21, 2021 13 minutes ago, cayars said: In a web browser YES but you have to change your port forwarding and the ports in Emby NETWORK menu. Web browsers use port 80 for UNencypted traffic and port 443 for ENcryped traffic. So if you switch over to using port 80 and port 443 you will no longer need to enter port number in a browser. Using either http or http will be enough as they will use the defaults of 80 or 443. The trick to this is to understand Emby itself will always internally listen on port 8096 and 8920. So you setup your port forwarding to: WAN IP/80 to Emby Server IP/8096 WAN IP/443 to Emby Server IP/8920 If that is not clear or you don't understand, send me a PM and I can remote in and help you with this. It's a 3 to 5 minute job to set this up. Add another couple of minutes as I explain it so figure on a 7 to 10 minute remote session if you need assistance. Carlo PS this is exactly how I run my personal system with port 80 and 443 but I use a domain name as well so a person can just type my domain in a web browser and connect which is very nice. Emby is AWESOME this way! Thank you SO MUCH! That's AWESOME! Yes, I've got it working perfectly now without the port needing to be there!
Carlo 4561 Posted January 21, 2021 Posted January 21, 2021 38 minutes ago, nartoo said: Thank you SO MUCH! That's AWESOME! Yes, I've got it working perfectly now without the port needing to be there! That was fast! I guess my explanation of how to do the port forwarding was good? I'm working on an advanced section or remote setup so your feedback is very much welcome.
nartoo 1 Posted January 21, 2021 Author Posted January 21, 2021 5 minutes ago, cayars said: That was fast! I guess my explanation of how to do the port forwarding was good? I'm working on an advanced section or remote setup so your feedback is very much welcome. Yeah, it was good. I've done port forwarding before when I initially set up my Emby server, and had to get a static IP assigned by my ISP. The SSL side of stuff was where I haven't really dabbled before, so now I'm gaining a good understanding of how it all works together Longer term, I want to get it to a point where it automatically refreshes the SSL certificate utilizing Docker and nginx, but I'll get to that lol. One step at a time.
Carlo 4561 Posted January 21, 2021 Posted January 21, 2021 Cool, thanks for the feedback and glad you got things working so fast! Always a pleasure when that happens.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now