SOLVED: Jellyfin Android app connection issue

[Darn6466]

Is there any way to get a detailed logging from the Jellyfin Android app?

Server 10.8.10 (on Windows 11)
App 2.6
Android 14 (Pixel 8pro)

I can't do a fresh connect to my server when I'm not in my network.
This is explicitly only the case, when I want to connect an new device or try to relogin (change server).
I can use the app without issues from everywhere when I'm once connected.
At the same time, via any browser (on the same device) I can use Jellyfin  everywhere  too.

I've tested multiple devices/apps/networks.

Android adb logcat just says:
ConnectionHelper: No valid servers found, invalid candidates were: https://DOMAIN:PORT/Failure(org.jellyfin.sdk.api.client.exception.TimeoutException: HTTP request timed out)

While I was testing it futher and futher, I tryed to capture the raw traffic (on my Phone) to compare it working/broken.
I found "PCAPdroid" and "Draeneg". These apps are using a local VPN to capture the traffic.
The wild part, when this simulated VPN is on, I CAN do a fresh connect with the App.
The "VPN" is only for the capture and doesn't connect to my LAN at all.
So the Jellyfin app is then forced to behave different with the VPN??

Any ideas?
I've tested a lot, https/http/IP/proxy/noproxy/...

Thanks!

[TheDreadPirate]

Are you using a legit cert (Let's Encrypt) or a self signed cert? It sounds like you are using a reverse proxy. If so, which one?

[Darn6466]

Yeah I'm using Lets Enrcrypt. The cert is injected via the synology reverse proxy.

[Darn6466]

Holy smokes I've found it, after lots of testing with other proxy/config/DNS-Names.

My primary DnyDNS FQDN was configured for IPv4 and IPv6. Maybe the proxy didn't handle v6 e.g., usally I use v4.
It seems that the Jellyfin android app only do a fallback to v4 when logged in, not on the login page.

After I removed the v6 adress from my DynDNS FQDN I finally can do a login from outside my network.

Thanks anyways!!!