4 Password Resets outside local network

Harvey Tindall edited this page 2021-06-06 18:08:02 +01:00

If you have Jellyfin set up to recognize connections from the LAN network, it will complain when a user tries to do a password reset remotely. If you're using a reverse proxy, Jellyfin knows the real IP of a user through the X-Forwarded-For HTTP header, which common proxy configs include. If you want to allow password resets for remote users, you can selectively override this with an IP address the Jellyfin sees as local for the necessary routes, which are http://<jellyfin address>/Users/ForgotPassword and http://<jellyfin address>/Users/ForgotPassword/Pin.

Example NGINX config

    # add to your \`server {\` section

    # rest of jellyfin config

    location /Users/ForgotPassword {
        proxy_pass http://<jellyfin address>/Users/ForgotPassword;
        proxy_set_header X-Forwarded-For <any local ip address>;
    }

    location /Users/ForgotPassword/Pin {
        proxy_pass http://<jellyfin address>/Users/ForgotPassword/Pin;
        proxy_set_header X-Forwarded-For <any local ip address>;
    }

I use nginx personally so don't have experience with other proxies like caddy or apache. Feel free to create an issue or contact me if you want to add an example.