plexargod

Plex Argo Daemon - A systemd script to update the Plex API to use the current cloudflared tunnel address for remote access

Create a free Cloudflare Argo Tunnel to your Plex Media Server

Enables fast remote access to your Plex Media Server, even behind a carrier grade NAT or VPN with no port-forwarding ability.

NOTE: Do not add localhost, 127.0.0.1, or ::1 to the Settings/Network/List of IP addresses and networks that are allowed without auth box. That will allow anyone with your Plex Argo URL (anyone that is a member of your server) to access the Admin WebUI with no access controls.

What is CloudFlare Argo?

Read the The Cloudflare Blog - A free Argo Tunnel for your next project.

TL;DR - Free TryCloudFlare Argo Tunnel features:

• Operate much like a Reverse SSH tunnel + nginx on a remote VPS
• A golang cross-platform tunneling daemon (cloudflared)
• Unique URLs per session (i.e. apple-bali-matters-local.trycloudflare.com)
• Support for http:80 & https:443
• Free to use and no bandwidth restrictions
• No account or authentication requirements
• Simpler setup with much less overhead

Remote Access Tunnel Setup

• Have your Plex Media Server running and contactable by the plexargod machine.

• Test Connectivity (401 Unauthorized is expected since we are not passing a Token)

  ubuntu@ubuntu20:~$ curl -s -I localhost:32400
  HTTP/1.1 401 Unauthorized
  X-Plex-Protocol: 1.0
  Content-Length: 193
  Content-Type: text/html
  Connection: close
  Cache-Control: no-cache
  Date: Thu, 16 Apr 2020 19:15:58 GMT

• Install cloudflared

  # Add Cloudflare GPG key and apt repository
  sudo mkdir -p --mode=0755 /usr/share/keyrings
  curl -fsSL https://pkg.cloudflare.com/cloudflare-main.gpg | sudo tee /usr/share/keyrings/cloudflare-main.gpg >/dev/null
  echo 'deb [signed-by=/usr/share/keyrings/cloudflare-main.gpg] https://pkg.cloudflare.com/cloudflared any main' | sudo tee /etc/apt/sources.list.d/cloudflared.list
  sudo apt-get update && sudo apt-get install cloudflared

• Install plexargod and the systemd service:

  curl -fsSL https://raw.githubusercontent.com/danielewood/plexargod/main/plexargod.sh | sudo bash -s -- --install

  If your Plex Media Server is on a different host, pass the URL:

  curl -fsSL https://raw.githubusercontent.com/danielewood/plexargod/main/plexargod.sh | sudo bash -s -- --install http://192.168.1.50:32400

  To recreate the systemd service locally (e.g. to change the Plex URL):

  sudo plexargod --install http://192.168.1.50:32400

• Run first-time setup to link your Plex account:

  • Open browser signed in to your Plex Account to https://plex.tv/link
  • Enter the four digit code shown in the console

  sudo plexargod --interactive

  

• Start the service:

  sudo systemctl start plexargod

• Done

Plex API Endpoints

When you specify a custom connection URL in your Plex Media Server, it will publish that URL in the Plex API. This allows all your clients to discover alternative paths to your server.

Plex API endpoints that are used to facilitate plexargod:

• https://plex.tv/pins.xml
  • Requires X-Plex-Client-Identifier (Header)
  • POST returns Token URL and Code for 'https://plex.tv/link'
• https://plex.tv/pins/123456789
  • Requires X-Plex-Client-Identifier (Header)
  • GET returns null or X-Plex-Token, depending on if user has entered code.
• ${PlexServerURL}/:/prefs
  • Requires X-Plex-Token (Header or Embedded in the URL)
  • GET to read the current preferences
  • PUT to change any of the preferences
• ${PlexServerURL}/
  • Requires X-Plex-Token (Header or Embedded in the URL)
  • GET to read the machineIdentifier that is used on plex.tv/api
• https://plex.tv/api/resources
  • Requires X-Plex-Token (Header or Embedded in the URL)
  • GET to read the current published connections URLs

Once token is claimed, you will see it in your list of Authorized Devices.