HTTPS via Cloudflare-Nginx-Jellyfin Question

[SammyD]

Hello All,

I'm looking for guidance on how to change my remote connection to HTTPS. I'm not a noob but I'm no expert either. I'm confused as to what needs to be done on each component (Cloudflare, Nginx, Jellyfin). I currently have the following HTTP connection working. My Nginx Proxy Manager is on it's own container and Jellyfin is in another container. You can get an SSL in Nginx and it also looks like Jellyfin also has SSL. Any help would be appreciated. Thanks.

Cloudflare               Nginx Proxy Mgr (debian LXC)        Jellyfin (on another debian LXC)
-----------------------------------------------------------------------------------------------------------------
CNAME...                 Proxy Host...                                    Networking...
jellyfin.xxx.com        Name: jellyfin.xxx.com                     HTTP Port: 8096
                                Scheme: http                                   HTTPS: NOT ENABLED
                                IP: 192.168.1.111                             HTTPS Port: 8920
                                Port: 8096                                        SSL Cert Path: <blank>
                                SSL: NONE                                       Cert Password: <blank>

If I get an SSL in Nginx do I also need one in Jellyfin? 
Does Jellyfin need to reference the Nginx SSL?
What is Certbot and do I need this also?
Confused!