Optimal way to host Jellyfin server for me & my friends?

[FiGeMu]

Hey folks,

My current Jellyfin setup is very sub-optimal. It's just hosted on my gaming pc, and my friends just connect directly to an open port on my dynamic IP.
Recently however, I've gotten a new pc that is supposed to become my always-on home media server, and wanted to properly set up Jellyfin. I've got two primary concerns/ questions/ requirements that i would like advice with.
I'm concerned about my ISP / other organizations (stichting BREIN in my case) seeing what's going on on my server / what I'm streaming to my friends outside of my home network. 
Would a VPN be all i need to obfuscate / circumvent this? What about IP whitelisting?
I'd also like to make it as hassle free as possible for my friends to use the server. Currently they just connect directly to my IP in whatever app they're using, but when this changes they have to enter the new IP. Is there a way for them to just enter it once and never worry about it again?

Thanks in advance, if more information is needed please ask.
Sorry if this is the wrong place to ask, I'm still not very experienced with self hosting.