Block Common Exploits and Websockets are fine to have enabled. Websockets, in particular, is required. Caching was the only option I was concerned about.
I am assuming you are using Nginx Proxy Manager and not vanilla Nginx.
Jellyfin 10.10.3 (Docker)
Ubuntu 24.04 LTS
Intel i3 12100
Intel Arc A380
OS drive - SK Hynix P41 1TB
Storage
3x WD Red Pro 6TB CMR in RAIDZ1 (JF Library)