The Crime Scene Was a File Mount: qBittorrent, Jellyfin, and Safer Sandboxes
A playful qBittorrent and Jellyfin incident reveals a serious homelab lesson: shared folders, not rogue software, often define the real security boundary. This guide covers staging directories, read-only mounts, non-root services, remote access, and safer update habits.