Yeah I find it a bit funny when people self host to get away from cloud and then use Cloudflare tunnels.

CF tunnels will ban your account if you used it to watch a movie due to DMCA/copyrights.

Is this really true? "A friend of mine" has been running a Jellyfin server behind Cloudflare tunnels for years and hasn't had any issue.

Not sure if it is still like this, but jellyfin used to leak massive amounts of metadata. For example by checking the thumbnail paths (which were unauthenticated) you could see what shows/movies someone had.

Might want to warn the "friend" if they don't have auth on the tunnel itself.

I would guess they only take action when they get a DMCA complaint and that wouldn't happen if you only share privately with friends.

They can also take action if they decide you're wasting their bandwidth or (especially) cache space. It's not allowed to host video files on any free cloudflare plan due to cache space.