502 Bad Gateway

[babatremblay]

I'm using Cloudflare tunnels to connect babamovies.com with my local Jellyfin instance, but I'm encountering a connection refused error. Here’s the  error message from my wsl cmd line:
ERR Request failed error="Unable to reach the origin service. The service may be down or it may not be responding to traffic from cloudflared: dial tcp <jellyfin WAN IP>:8096: connect: connection refused" connIndex=3 dest=https://babamovies.com/favicon.ico event=0 ip=198.41.200.113 type=http

here is my docker-compose.yml:

Code:

version: '3.8'

services:
  jellyfin:
    image: jellyfin/jellyfin
    container_name: jellyfin
    network_mode: 'host'
    volumes:
      - ./config:/config
      - ./cache:/cache
      - type: bind
        source: ./Movies
        target: /media/movies
        read_only: true
    restart: unless-stopped
    environment:
      - JELLYFIN_PublishedServerUrl=https://babamovies.com
    extra_hosts:
      - 'host.docker.internal:host-gateway'
  caddy:
    image: iarekylew00t/caddy-cloudflare:latest
    container_name: caddy
    ports:
      - 80:80
      - 443:443
    volumes:
      - ./Caddyfile:/etc/caddy/Caddyfile
      - caddy_data:/data
      - caddy_config:/config
    restart: 'unless-stopped'
    depends_on:
      - jellyfin
    environment:
      - CLOUDFLARE_API_TOKEN=${CLOUDFLARE_API_TOKEN}

volumes:
  caddy_data:
  caddy_config:

and here is my caddyfile:

Code:

babamovies.com {
    reverse_proxy <jellyfin WAN IP>:8096
    tls {
        dns cloudflare {env.CLOUDFLARE_API_TOKEN}
    }
}

I have verified that my jellyfin server is accessible locally and that the CLOUDFLARE_API_TOKEN is correct, but can't access it via babamovies.com (it's showing a 502 gateway error). 
Any suggestions for debbugging this issue?