Connecting Securely to Jellyfin server through HTTPS

[bitmap]

I have heard one of the easiest reverse proxies to start with would be NPM, nginx proxy manager. I use SWAG, which is an all-in-one container from linuxserver.io. You need a certificate and a reverse proxy at the very least. SWAG (and I think NPM) bundle certbot, which can handle getting the cert and renewing it.

Past that, you need a domain name (DuckDNS can provide a free one) and a way to determine your IP address if you don't have a static external IP (not common). DuckDNS can provide both the domain as well as dynamic IP tracking.

Your connection to Tailscale might be HTTP, but your transmissions between your server and client are secure. Tunneled VPN like Tailscale/Wireguard is one of the safest ways to access your home server. Exposing your server to the internet opens up more vulnerability.