Protection Against EVERYTHING

[TheDreadPirate]

I believe gnattu was referring to self-hosted VPNs like Wireguard, OpenVPN, or Tailscale. A lot of routers come with OpenVPN Server that you can enable to act as the "gateway" to your LAN.

IMO, the "risk" of hosting a service on the Internet is greatly overstated. I am not saying that the risk doesn't exist, but taking basic pre-cautions mitigates or eliminates that risk.

Use https, keep your server up-to-date, use strong passwords for accounts and you've mitigated or eliminated most of the risk and privacy concerns most people have.

If you've already setup caddy and duckdns, I am assuming you're already using https with Let's Encrypt certs. Accessing the server with the IP address will always work if Jellyfin is the only service running. Unless you are talking about accessing Jellyfin via port 8096 from an external device.