Setup advice

[sumsar158]

Hy, is my setup logical and secure or am i doing unnecessary or redundant things here?

Main thing is that i want it to be secure but i'm not using https on jellyfin setting and forwarding to http address idk if that matters here tho...

quick diagram of the setup
   

edit:
cloudflare: also disabled caching

[TheDreadPirate]

Looks fine to me. Though "toggled on all options" in Nginx has me thinking you also enabled "cache assets", which should NOT be enabled.

[sumsar158]

Looks fine to me.  Though "toggled on all options" in Nginx has me thinking you also enabled "cache assets", which should NOT be enabled.

What if i use CF tunnel, i see so many conflicting posts tho some say its against tos some say if you diable caching its good idk

[TheDreadPirate]

Using CF tunnels to stream video/audio is against their TOS. Do not do this. It also causes weird issues and significantly reduces responsiveness.

Caching on Nginx has nothing to do with CF tunnels/proxies.

[sumsar158]

Using CF tunnels to stream video/audio is against their TOS.  Do not do this.  It also causes weird issues and significantly reduces responsiveness.

Caching on Nginx has nothing to do with CF tunnels/proxies.

no i meant disable caching in cloudflare, but if i dont use tunnel and keep it like this, is this okay from TOS and security prespective?

[TheDreadPirate]

Caching in CF? Can it even do that if you aren't proxying?

No, using tunnels or proxying through CF is against their TOS for streaming content. Their proxy service is explicitly for plain, static, HTML content.