Have I done something crazy?

[Tiote '87]

Hi

Jellyfin noob here with what's probably a stupid question, apologies in advance.

I'm wanting to migrate from Plex to Jellyfin and I've been struggling to set up remote access properly using Caddy and DuckDNS.

My ISP is Hyperoptic so I'm behind CGNAT and I can't open 443 even if I forward it in the router settings.

After a load of trial and error and mashing together various guides and advice from all over the place, I think I might have got it to work, but I may also have done something stupid.

Anyway, what I've ended up with is a Caddyfile that looks like this:

subdomain.duckdns.org:4443 {
    reverse_proxy 127.0.0.1:8096
}

And a port forwarding rule in the router of:
WAN Port: 4443~4443
LAN Port: 4443~4443
Protocol: TCP

And Network Setting in Jellyfin like the attached.
   
   
   

And I can now access the Jellyfin sign in page on my phone with the wifi off at https://[subdomain].duckdns.org:4443 seemingly securely.

So my question is have I done something stupid and/or is there anything I could do better?

Thanks in advance.