Open joshuaboniface opened 5 years ago
I agree with these changes. Maybe just make it so whatever page is last has the "finish and go to dashboard" rather than a unique page, but thats something requiring testing.
It would be nice if the "Preferred Metadata Language" (page 4) could somehow inherit the "Preferred display language" (page 1) as its default...
I've tagged this issue "discussion needed"
I think it deserves to be done, but we could use some feedback on it. If we are aiming to fix it up, its also not impossible to consider redoing the entire system.
Feedback will let us know if a redo can turn out better than a tune up.
I don't know why UPnP port forwarding is enabled by default and IMHO it shouldn't as that can present quite the security risks to users who don't know what they're doing and routers who are maliciously compliant in this.
I understand why they did it: its another "easy" solution for the non-technical. Which really does, again, raise the bigger question: how much do we sacrifice sane defaults and security to support non-technical users. Emby clearly sat on the "users" side of that fence, but moving to the other side will alienate a lot of users. It's a hard problem.
Well... I'm still of the mind its off by default and you can turn it on.
Maybe we describe more of what it does in the text underneath so its more apparent that it can be a security risk?
IMHO remote access should be explained in the documentation with all the risks and options for handling it well described. It should not be something that may or may not be (depending on the router) be enabled by default.
I don't know why UPnP port forwarding is enabled by default and IMHO it shouldn't as that can present quite the security risks to users who don't know what they're doing and routers who are maliciously compliant in this.
I would say it should be off by default and enabled in settings (with a question about that in "Setup new instance" wizard this issue discusses).
UPnP should probably be set in the "Remote Access" setup page as part of the initial setup.
It would be disabled by default, for security, and the could be a checkbox along the lines of "Enable remote access to this server" with an info text below it that reads "Make Jellyfin server accessible from outside your network by enabling UPnP".
I think that when you tick that toggle, a dialog should appear noting the potential security risks (a popup stands a better chance of being read by the user than the flavor text of the toggle).
Issues go stale after 90d of inactivity. Mark the issue as fresh by adding a comment or commit. Stale issues close after an additional 14d of inactivity. If this issue is safe to close now please do so. If you have any questions you can reach us on Matrix or Social Media.
Commenting to state that I will be re-reviewing the setup wizard and adding thoughts that are more relevant after the 4.5 years since the project started. There's a few other things worth adding, for instance:
More ideas are welcome and I will update the original message to include them.
The current initial setup screen is a great idea, however the execution falls flat. There's a lot of things that can be improved on it, in almost every screen. This issue will track the required changes.
Sub-issues: https://github.com/jellyfin/jellyfin/issues/192
My thoughts, per-page (numbered):
<page>
to help translate Jellyfin" at the bottom.Feedback welcome.