Reverse Proxy SSL

[blawford]

I’m trying to figure out the best way to seamlessly access Jellyfin from my mobile devices, whether I’m at home or away. 

My setup: 
- Jellyfin is running in a Docker container on Unraid. 
- The container’s network is set to br0, and I’ve assigned it the static IP 10.0.0.6. It listens on ports 80/443. 
- I’m using Nginx Proxy Manager (NPM) in another container to handle reverse proxying. 
- I have a subdomain, media.domain.com, set up in NPM to route the traffic to Jellyfin. 
- The proxy host has a self signed SSL certificate and HTTPS is enforced. 

This setup works perfectly when I’m outside my home network. 

The problem: 
I want media.domain.com to work both at home and away, without needing to switch servers in the Jellyfin Android app. Additionally, I want traffic to route locally when I’m on my LAN, so it continues to work even if my internet is down. 

What I’ve tried: 
I set up a static DNS entry on my router to resolve media.domain.com to 10.0.0.4 (NPM), thinking this would allow my local devices to still reach JellyFin with SSL. However, when I do this I am unable to connect when using the Android app, I suspect because a SSL related issue. 

I haven't tried pointing the media.domain.com on my router to 10.0.0.6 (JellyFin) directly, but if I did this I can't see how I could use https://media.domain.com both home and away.

My question: 
What’s the best way to set this up so that I can always the same server address, whether I’m at home or away with traffic routing locally when at home? I would prefer to not use any sort of setup that would require config on client devices (VPN for example).

Would love to hear how others have solved this.