Reverse proxy using plex.direct:32400 link

Plex Media Server Remote Access
1

Hey Peeps

Quick Q.

Trying to reverse proxy Plex using plex.direct link, just refuses to work. Looking at Caddy error log it says the link cannot be resolved. I am obviously being a dumbass.

Caddy file

domain.com {
        reverse_proxy https://192-168-1-74.redacted.plex.direct:32400
}

I got the plex.direct link from api, see below

redacted
</resource>
</resources>

This is the page that inspired me Clearing up Plex networking internals - scholz.ruhr

Remote access via Verizon Cell network
2

Solved.

I don’t know why but the above started working after I defined;

Settings > Network > LAN Networks
Settings > Network > List of IP addresses and networks that are allowed without auth

See below

image
image563×888 75.9 KB

Would still appreciate any feedback about this, would love to understand what’s actually going on lol

3

Giving everyone admin access to your server.

2 Likes
4

Huh? No.

5

You’ve (presumably) added your local network to the list of networks allowed to connect with no authorization. If not configured correctly, external connections through your reverse proxy may be seen as coming from 192.168.1.0/24. Therefore, this could potentially allow external users to access your server without auth, thereby allowing them full admin access to your server.

That particular setting is a convenience feature and should never be necessary for normal operation of the server.

1 Like
6

If I may add?

  1. Using the Plex.direct URL is problematic. It will change every time your certificate updates.

  2. The purpose of the No-Auth is for use in your home or camper when there is no internet service. ( I live in an area where internet is on telephone poles and does go out in the winter )

  3. Tying a proxy to the No Auth url is dangerous at minimum. It would mean that Anyone could go into your server as if you and do whatever they wanted. PMS is designed such that nobody can access your server without you expressly sharing your server via the Sharing mechanism.

1 Like
7

EDIT

I’ll take a bow to that, both of you.

I’ve removed the local auth setting. :slight_smile:

8

Not following this? Do you mean when the cert on lolwtf renews or the plex.direct one?

9

When the plex.direct cert (the one specific to your PMS server) renews.

That’s the one which changes every 90 days

The URL is based on the certificate ID.
When the certificate updates, its ID will change. The downstream effect is the URL will change as it tracks the new cert ID.

1 Like
10

That’s really handy to know! I appreciate you sharing that.

I am slowly transitioning away from Plex but it’s easy enough to update the caddyfile until then.

11

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.