http-observatory VS Jellyfin

Here are a few tools you can use: https://www.zaproxy.org/ (Web app scanner) https://www.ssllabs.com/ssltest/analyze.html?d=importer.bilendo.de (SSL server test) https://github.com/santoru/shcheck (Security Header Check) https://observatory.mozilla.org/ (Content Security Policy validator)

Regular Audits: Use tools like Mozilla Observatory or Security Headers to regularly check your headers.

What's better about this vs. Mozilla Observatory.

https://developer.mozilla.org/en-US/observatory (formerly https://observatory.mozilla.org/)

Or Security Headers?

https://securityheaders.com/

Or VENOM?

https://github.com/oshp/oshp-validator

Applaud the effort, these are things that more devs should be aware of when building websites...

Hey some specific feedback on this tool... On mobile, it has a lot of "view port wobble" and the input fields aren't keyed right, it's just using a straight text input field so you don't get any ".com" buttons as you type. Small UX stuff like that annoy me more than if a page has a privacy policy setup correctly. (=

Detectify once made an offer of making free scans which I took them up on. There are plenty of free Content Security Policy (CSP) and other vulnerability checkers around such as Observatory or Pentest. Shields UP!! will identify which ports you have open.

Website Headers Analyzer (Mozilla)

scan our site with Mozilla Observatory and improve our grade by registering a domain name, enabling HTTPS, adding a certificate and setting security headers

First, for session persistence, go with the default Django session with cookie storage. Set your cookie to HTTP only and ensure your application uses the most common HTTP security headers and controls. Test your application with https://observatory.mozilla.org/ to have an idea of what you're missing.

Mozilla Observatory

Are you talking about the Jellyfin server? It is quite an active project. Last release was 10.11.8 about a month ago, and github says that there have been 1049 commits to master since then.

https://github.com/jellyfin/jellyfin/releases/tag/v10.11.8

Jellyfin is primarily a video media server, but its music support is solid enough to be a strong contender — especially if you already run it for movies and TV. You get a unified library for video, music, audiobooks, and photos, with a single web UI and mobile apps covering everything.

[Jellyfin](https://jellyfin.org/) is a great alternative to Plex if you haven't taken a look!

I installed Jellyfin on my home server a few months ago but it’s already broken by upgrading to 10.11, and unusable until I restore 10.10 from backup or start over: https://github.com/jellyfin/jellyfin/issues/15027. There seem to be lots of other database migration bugs for this release and other ones.

Hey HN,

I’ve been working on a new Python SDK for [Jellyfin](https://jellyfin.org/). The official Python client (`jellyfin-apiclient-python`) is pretty much unmaintained, and I kept running into rough edges (missing exceptions, mismatched info/config, no playlist support, etc.).

So I built a new library: [*jellyfin-sdk*](https://github.com/webysther/jellyfin-sdk-python). It’s basically a high-level wrapper on top of OpenAPI-generated bindings, with some nicer patterns (method chaining, JSONPath, inversion of control). A few things it does differently:

* Target specific Jellyfin server versions (avoid breakage when APIs change)

In my case, the completed video is saved to a shared storage volume accessible by a Jellyfin media server running in a parallel container. This setup allows me to seamlessly stream and watch my personalized Reddit summary on any of my devices. While this is great for personal viewing, the workflow can be easily extended using n8n's built-in integrations to automatically upload the video to YouTube, send it via Telegram, or distribute it to virtually any other platform.

That's when I turned to Jellyfin, a free, open-source media streaming solution. Paired with ngrok, I could securely share access with family and now had my very own private Netflix running directly from my Linux desktop. This was one of those side projects that started as a practical fix but turned into an unexpectedly enjoyable weekend build.

Jellyfin – media player