Only allow Jellyfin to be accessed on a server

[okinflation5]

I currently have a setup where users can use a Wireguard tunnel to connect to my Jellyfin server and access Jellyfin on port 8096. However, I also host other services on this server on other ports, and I want to be able to make it so some users are only allowed to access Jellyfin. What would be the best way to go about this?

From my limited networking knowledge, I can think of either messing with firewall rules on the server or using a Docker container. Please let me know what would be recommended. Thanks!

[Fate]

best way is probably running wireguard on your router. So you only expose jellyfins port to your VPN users.

You can also run opnsense virtualized on proxmox and use it as a router and run jellyfin as a vm/container.

[34626]

I belive you can do this in the Wireguard configuration files for the VPN users.

[okinflation5]

I belive you can do this in the Wireguard configuration files for the VPN users.

Would this be done by only allowing certain ports to go through the tunnel? From what I've seen online it seems like that isn't the job for Wireguard.