Kyoo v5 – self hosted media server
Plex alternative with anime parsing, but Jellyfin already dominates the self-hosted space.

Gluetun namespace isolation beats firewall rules for leak-proof torrenting.
Self-hosting enthusiasts, home media server builders
Plex · Jellyfin · Tailscale
I wanted my family to have Blu-ray quality with a streaming UX. They open Overseerr on their phone, request a movie, and it shows up in Infuse on Apple TV. Subtitles in three languages, hardware transcoding for mobile, full remux on the big screen. They have no idea what's behind it.
What's behind it: Sonarr, Radarr, Prowlarr find and grab content. qBittorrent downloads through a WireGuard tunnel. Bazarr pulls subtitles. Jellyfin serves it all. Everything self-heals — endpoint health checks, autoheal restarts, dependency ordering so nothing starts in a broken state.
The security model is the part I obsessed over:
- qBittorrent shares Gluetun's network namespace at the kernel level. No firewall rule to misconfigure — if the VPN drops, there's no network path. - Traefik binds to a Tailscale IP only. Zero ports face the internet. - Three isolated Docker networks separate ingress, internal, and P2P traffic.
Two Compose stacks, one .env file, MIT licensed.
Plex alternative with anime parsing, but Jellyfin already dominates the self-hosted space.
Netflix UI for torrent streaming, but Jellyfin, Plex, and Stremio already solve self-hosted media.
Browser-based transcoding for Plex clips when server-side tools require ffmpeg CLI.
Turns idle Macs into Jellyfin previews, skipping intros automatically.
This removes the friction of standing up Jellyfin by provisioning servers in your cloud account and giving each user neat subdomains and personal instances — smart for households who want control without manual orchestration. Deduplication and per-user quotas are useful features, but the site glosses over critical details like backup/restore, multi-tenant isolation, cost controls and security model for spawning cloud VMs.
Hardened *arr stack with actual VPN namespace isolation, not just firewall rules.