Networking guide
Self-hosted apps without port forwarding
Open ports are a target, and on many connections they don't work at all.
You'll need
- A machine at home running your apps
- Docker on that machine
- A free Seawise.io account
The problem with open ports
A forwarded port is reachable by every scanner on the internet, so the app behind it has to be safe on its own. Many ISPs also use CGNAT, where port forwarding can't work at all.
Seawise.io connects out from your server, so nothing on your router is opened, and visitors sign in before they reach any of your apps.
Step by step
We'll use Jellyfin as the example. Any app with a web page works the same way.
Run the Seawise.io container
Run this on the machine where Jellyfin runs. The container connects out to Seawise.io, so you don't open any ports on your router.
On Docker Desktop for Mac or Windows, replace --network host with -p 8082:8082.
$ docker run -d --name seawise \ --restart unless-stopped \ --network host \ -v seawise-data:/config \ ghcr.io/seawise-io/seawise-client:latest
✓ Container started
Set a password
On a computer at home, open http://your-server-ip:8082 and create a password for the container's page.
Connect it to your account
Give the server a name, click Connect, and approve it in the seawise.io tab that opens. Sign up for free there if you haven't yet.
Add Jellyfin
Fill in the name, the address and the port Jellyfin uses (8096 by default), then click Add.
--network host, use localhost. On Docker Desktop, use host.docker.internal. If Jellyfin runs on another machine, use its local IP, like 192.168.1.20.
Open it from anywhere
Jellyfin now shows on your Servers page at seawise.io. Click it from any browser, on any network, and you're in.
Share it
Go to Portals, create one (say, Family), and add Jellyfin to it. Then open its sharing settings and add the email of everyone who should get in.
Skip this step if Jellyfin is just for you.
What they see
Send them the portal link. They sign in with the email you added, using Google, GitHub or an email link, and tap Jellyfin. Nothing to install, on any phone, tablet or laptop.
If something's not working
An app shows as offline+
The container can't reach the app at the address you entered. On the server, check the app opens at http://localhost:PORT. If it runs in another container without host networking, use the server's local IP.
Someone gets a no access page+
They signed in with a different email than the one you added. Ask which email they used, or add that one too.
You already forwarded ports before+
Once your apps work through Seawise.io, remove the old port forwarding rules from your router so they're no longer exposed.