Best Security Practices?

[TheDreadPirate]

Nginx Proxy Manager is handling all external accesses on ports 80 and 443. The port we published in Docker (or did we use host networking?) only refers to docker and not your router. You should NOT be opening port 8096 on your router. This would allow unencrypted, direct access to Jellyfin from remote clients. Which negates the whole purpose of setting up Nginx.

Remember, Nginx is acting as a middle man between the client and the Jellyfin server. Remote Jellyfin clients are not directly accessing Jellyfin on port 8096. They are connecting to Nginx who passes traffic to and from the server and client. Therefore port 8096 should not be open on your router.