Remote access help

[gretagarbo 3]

failed from 4g at home.txt

Hello!

I've been running emby on docker on omv for 6 months now. I changed my isp (the router is supplied by isp in France) so I messep up my config and not able to play files on my domain-name-configured-emby from outside my home. I can access and play from my home

HOWEVER I can access emby and play from the app. Pretty weird problem for me. (Black screenfailed from 4g at home.txt

Here are my logs.

 

Thank you for reading.

 

embyserver(2).txt

Edited July 1, 2021 by gretagarbo
complete log

[Luke 42077]

@gretagarbo I've moved your posting to it's own topic.

@cayars

[Carlo 4561]

Hi, what you probably need to do is reboot all your internal equipment if you haven't already as your new ISP router will give out new IPs.

Then you may need need to reset your ports.  Have a look through this article which has troubleshooting steps in it as well to help figure out what might be wrong.
https://support.emby.media/support/solutions/articles/44002137137-remote-setup

Let us know how you make out or if you need more hands on help.

 

[gretagarbo 3]

I'll be back tomorrow when I can test on my girlfriend's local network. It works now ( I had mistaken while declaring my sources).

It's seems to be ok by my side but not ok when i connect from another wifi network (I just tested with my phone, I must test with another computer or device)

Thank you for your help @cayars and @Luke

Not solved yet

[Carlo 4561]

Let us know how you make out.  If you can't figure it out send me a PM and I can remote in and give you hand.

[XcOM9876 9]

Above is good steps, I recently got a new router from my current ISP due to the old one flaking out, I have just spend best part of today rebooting everything (Including the NTE), and setting up all my rules again and migrating all my devices over to the new hub (The sooner I get my own dedicated edge router and kit the better lol), after I had to do a DNS refresh on my dynamic DNS service to point to my new IP before remote access was working.

[gretagarbo 3]

Hello all and thank you for answering!

I'm running emby on docker on openmediavault 5.

I reset my config and created my domain name for holidays.

Now, locally (my-local-ip:8096 or 8920 with security exception), I can read everything and I have emby premiere enabled.

But externally (my-domain-name:external-port with ssl cert), I can't read anything ("no compatible stream are currently available") and I have "get emby premiere". As if there were two different configurations. I'll give you my logs after the first library scan.

I'm lost now

Edited August 26, 2021 by gretagarbo
added env variables

[Luke 42077]

32 minutes ago, gretagarbo said:

Hello all and thank you for answering!

I'm running emby on docker on openmediavault 5.

I reset my config and created my domain name for holidays.

Now, locally (my-local-ip:8096 or 8920 with security exception), I can read everything and I have emby premiere enabled.

But externally (my-domain-name:external-port with ssl cert), I can't read anything ("no compatible stream are currently available") and I have "get emby premiere". As if there were two different configurations. I'll give you my logs after the first library scan.

I'm lost now

Hi there, let's look at an example:

 

Thanks.

[gretagarbo 3]

Hello Luke

I don't really understand what you mean. It's still a remote access problem but it's gotten worse.

Here's my log. It's 7:29PM here.

It's a general emby issue because I can read from the inside but not outside (not in 4g neither). I need help with configuring mysite.com in emby docker.

Thank you for replying to my topic but i wasn't making any progress, so i didn't want to bother you. Now it's a mess i can^^ and if it's a matter of time without answer, it's holiday time. Sorry to bother all of you.

log0826.txt

hardware_detection-63765601477.txt

Edited August 26, 2021 by gretagarbo
hardware detection

[Luke 42077]

34 minutes ago, gretagarbo said:

Hello Luke

I don't really understand what you mean. It's still a remote access problem but it's gotten worse.

Here's my log. It's 7:29PM here.

It's a general emby issue because I can read from the inside but not outside (not in 4g neither). I need help with configuring mysite.com in emby docker.

Thank you for replying to my topic but i wasn't making any progress, so i didn't want to bother you. Now it's a mess i can^^ and if it's a matter of time without answer, it's holiday time. Sorry to bother all of you.

log0826.txt 103.64 kB · 0 downloads

hardware_detection-63765601477.txt 122.12 kB · 0 downloads

Hi, are you sure this is the server log from when you tried to play? What time did you try to play?

[gretagarbo 3]

2020.txtThank you for your answer

I send you a new log .I tried to read Vinland Saga from AnimesF at 20:20 and seconds

I send you another log.I managed to read Vinland Saga from AnimesF at 20:51 and seconds from my local omv (192.168.1.37) on my laptop

2051.txt

Last log for this long evening with emby playing films and tv series (even in 1080p hevc)

• on my samsung tv
• on my iphone
• but not on my laptop

from mysite.com (https port)

emby playing films and series on everything from my local omv in http.

Good night and good luck!

0122.txt

Edited August 26, 2021 by gretagarbo
added logs

[Luke 42077]

@cayars

[Carlo 4561]

Hi, you don't have your networking setup correctly as you have "mysite.com" configured as the domain name and this is a webhosting site and that domain is owned by someone else.

Your log is full of communication errors as well with socket errors but is likely because of the first issue.

In order to use SSL/HTTPS you need your own registered domain and cert for your domain.

[gretagarbo 3]

Ok thank you @cayars and thank you @Luke

I copy my /etc/nginx/sites-enabled/mysite_com_omv_emby

server {
    listen [::]:80 default_server ipv6only=off;
    listen [::]:443 default_server ipv6only=off ssl deferred;
    ssl_certificate_key /etc/ssl/private/omv.pem;
    ssl_certificate /etc/ssl/certs/mysite_com_chain.pem;
    include /etc/nginx/openmediavault-webgui.d/*.conf;
server_name mysite.com www.mysite.com;

location / {
    proxy_pass http://192.168.1.37:8096; # Local emby ip and non SSL port
    proxy_hide_header X-Powered-By;
    proxy_set_header Range $http_range;
    proxy_set_header If-Range $http_if_range;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header Host $host;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_redirect off;

    #add_header 'Referrer-Policy' 'no-referrer';
    #add_header Strict-Transport-Security "max-age=63072000; includeSubdomains; preload" always;
    #add_header X-Frame-Options "SAMEORIGIN" always;
    #add_header X-Content-Type-Options "nosniff" always;
    #add_header X-Xss-Protection "1; mode=block" always;
    #add_header Content-Security-Policy "default-src 'none'; child-src 'self'; font-src 'self' data:; connect-src 'self' wss: ws: https://mb3admin.com https://github.com/MediaBrowser/; media-src 'self' blob: data: https://github.com/MediaBrowser/; manifest-src 'self'; base-uri 'none'; form-action 'self'; frame-ancestors 'self'; object-src 'none'; worker-src 'self' blob:; script-src 'self' https://www.gstatic.com; img-src data: https: http: ; style-src 'unsafe-inline' 'self' https://fonts.googleapis.com/css" always;

    #Next three lines allow websockets
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";


}


}

I ran into problems because I had not modified my omv ports so i had no access to omv (when you're dead it's for a long time, when you're dumb it's for eternity). My ssl cert is still valid for 8 months and were generated following the nginx emby namecheap tutorial i can't find (I'm pretty sure I read it on this site).

Something weird : I recreated from scratch my emby docker container and I could use it again (without declaring my sources) even if i had removed the former container.

Thank you for your infinite patience!

ffmpeg-transcode-f9080cb6-bb53-493e-add8-2ed404a9d420_1.txt

Edited August 27, 2021 by gretagarbo
I tried to read a file

[gretagarbo 3]

I found the nginx topic by @Swynol

I corrected and it works now

## Default Listening ##

server {
    listen 80 default_server;
    listen [::]:80 default_server;
    server_name _;

          return 301 https://$host$request_uri;
}

##EMBY Server##

server {
listen [::]:80;
listen 80;
listen [::]:443 ssl;
listen 443 ssl;
server_name https://www.mysite.com;   #your subdomain.domainname.com here

ssl_session_timeout 30m;
ssl_protocols TLSv1.2 TLSv1.1 TLSv1;
ssl_certificate      /etc/ssl/certs/mycert.crt;
ssl_certificate_key  /etc/ssl/private/openmediavault-generated.key;
ssl_session_cache shared:SSL:10m;
ssl_prefer_server_ciphers on;
ssl_ciphers ECDH+AESGCM:ECDH+AES256:ECDH+AES128:DH+3DES:!ADH:!AECDH:!MD5;

proxy_hide_header X-Powered-By;
add_header X-Xss-Protection "1; mode=block" always;
add_header X-Content-Type-Options "nosniff"  always;
add_header Strict-Transport-Security "max-age=2592000; includeSubdomains" always;
add_header X-Frame-Options "SAMEORIGIN" always;
add_header 'Referrer-Policy' 'no-referrer';

add_header Content-Security-Policy "frame-ancestors mysite.com emby.mysite.com;";   #add your domainname and all subdomains listed on your cert


location / {
proxy_pass http://192.168.X.X:8096; # Local emby ip and non SSL port

proxy_hide_header X-Powered-By;
proxy_set_header Range $http_range;
proxy_set_header If-Range $http_if_range;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

#Next three lines allow websockets
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
}

I removed the "http" section in order not to duplicate with /etc/nginx/nginx.conf

I don't have "get emby premiere" anymore and I can read videos on my laptop ( Vinland saga for example) I couldn't read via mysite.com. I'll test my configuration in wifi anywhere else tomorrow to see if the main topic is solved. I lack vocabulary to congratulate people here for the quality of the support but -again- Thank you all!embyserver(laptopwifi).txt

 

[Carlo 4561]

Thanks for the update.  Let us know how you make out.

[gretagarbo 3]

I'll be back on tuesday with news from another wifi network.

I noticed in my new configuration (when i connect to mysite.com in 4g), it's mandatory to push play -- the movie loads -- and press play again to start the movie.

It's the only thing i see. I have access to any resolution, any compression/codec on any share so it's ok.

[Carlo 4561]

Why are you using "mysite.com" when this isn't your domain name?

[gretagarbo 3]

Because my domain Name contains my name. So if you saw it in my logs, please delete the concerned logs . 

[Luke 42077]

Glad to see you resolved it. Thanks for the feedback.

[gretagarbo 3]

Solved! I can run Emby in wifi from my girlfriend’s house.