Exposing Jellyfin (HTTPS or is a VPN really req'd?) with family members remotely?

[bitmap]

The Roku client has been through some awesome development recently and while I'm not aware of anything on the corporate side, the devices serve my purposes very well, both at home and while I'm traveling, including overseas (it was a breeze to set my travel Roku up in Europe and keep the kids 6-16 occupied during down time).

If you containerize at all, you can wrap up A-D in one container with Swag, a Linuxserver.io offering that includes nginx, letsencrypt, CertBot, pre-made configurations that are in varying states of correctness, and fail2ban plus some pretty easy config steps for common hosting solutions like cloudflare or DuckDNS. I added how to beef up your encryption with Swag thanks up analysis and guidance from @TheDreadPirate to the guide linked in the post above.