HuanPhim

Overview

HuanPhim is a no-code infrastructure project focused on DevOps: a self-hosted Jellyfin service deployed on an Ubuntu VPS for a small private audience. I designed the container, storage, networking, access-control, and HTTPS setup instead of building another streaming frontend.

Features at a glance

• Runs Jellyfin and qBittorrent as Docker Compose services with persistent configuration, bounded logs, and separate download and media paths.
• Exposes Jellyfin through Caddy with automatic HTTPS at watch.huanphim.site while keeping application ports bound to localhost.
• Restricts administration to key-only SSH over Tailscale and a deny-by-default UFW policy; the qBittorrent interface stays behind an SSH tunnel.
• Uses a dedicated service account and a read-only Jellyfin media mount so the streaming service cannot delete the underlying library.
• Prioritizes direct play and monitors storage, bandwidth, container health, and transcoding pressure for reliable operation on a bounded VPS.