Trouble is many IT departments blindly purchase install whatever crap a security company recommends, without following step 2 (white listing).
I’ve been blocked by these stupid filters from Amazon while in engineering having to order parts to get the equipment running because it was flagged as “Japanese porn” on the guest (contractor) network. And yes I resorted to a proxy/socks tunnel to my VPS.
The thing about containers is they usually have no NÉED in general for pure ope file system access. No need for full network access (host, LAN, WAN). So the smaller the privileges the better. So even if it is compromised there’s very little you can do with it.
This is also a general principle for network management. For instance when does the TV need to print or access any server other than Jellyfin?
Umm, a static ipv4 ip?
NEVER transcode. Do it as a background task offline. Even GPUs and desktop servers are best offline.
I used to use sstunnel over ssh. So basically I’d run ssh just for the link, then run sstunnel which set up a SOCKS proxy. This was 10 years ago.
If you can live on ipv6 only fly.IO is free for 1 CPT shared with low RAM and disk. Up to 3 are free. An ipv4 ip is $2 per month.
Oracle is supposed to be the better deal but refuses to accept my credit card and I’ve heard lots of issues like erasing servers.
At $2-3 IONOS is the next step up. Digital Ocean is popular too but at$5 blows up your budget.
May want to look for stable storage first.