Origin Certificate
For optimum security and application safety, you might consider creating an Origin certificate.
I can't recommend CloudFlare enough, which is a free service to enhance your website. Enabling CloudFlare how to set up CloudFlare for your domain. Make sure you follow the steps on part 1 of that tutorial before proceeding with your certificate.
First, head over the crypto tab:
Then click Create Certificate next to Origin Certificate:
Leave all settings the default and click Next:
Copy the complete content of Origin Certificate and paste this into a file in PuTTY that you name "cert.pem"
nano cert.pem
Do the same with the private key, copy the content and paste this in PuTTY in a file named "private.key".
nano private.key
Create your certificate by typing:
openssl pkcs12 -inkey private.key -in cert.pem -export -out origin.pfx
You will be asked for a password, enter a password that you can remember 😸
You now have a file named "origin.pfx" in your home folder.
Next, copy this file to your Plex or Emby installation:
cp origin.pfx /var/local/Gooby/Plex
or
cp origin.pfx /var/local/Gooby/Emby
Lastly, you will need to tell Plex and/or Emby that you now have a custom certificate
Go to your network settings and click advanced.
Under "Custom certificate location" enter
/config/origin.pfx
Enter the password you created in "Custom certificate encryption key".
Finally, enter plex.yourdomain in "Custom certificate domain".
Congratulations, Plex is now fully certified!
Under the Advanced Settings in Emby, scroll down to Public Port Number and set it to
80
Public https port number should be
2096
Type your emby.yourdomain in External domain,
Custom ssl certificate path should point to
/config/origin.pfx
And enter your Certificate password.
Make sure Secure connection mode is set to "Required for all remove connections."
Emby too is now fully secured!