clb92

the practice of concealing the details or mechanisms of a system to enhance its security

That’s literally the opposite of what open source and Linux does, though. Anyone can see how it works, so they have to have actual security instead of relying on security through obscurity.

WHOIS exposes 2 contact email(s) — registrar privacy not used

Registrar privacy is in fact used. It’s just the Namecheap abuse email address and an anonymized *@withheldforprivacy.com mail address. It shouldn’t list those as results.

If there was a Jellyfin app that supported adding a custom header to the server connection, you could set your reverse proxy to just let the connections with that secret key header through, and make everything else go through the extra auth middleware. But as far as I know, none of the Jellyfin apps have that feature, even though it has been requested. Lots of other selfhosted apps do have the feature though, and I use it in a few places as well.

Does Forgejo have any killer features or something that makes it worthwhile for me to switch away from Gitea now?