Block Common Exploits and Websockets are fine to have enabled. Websockets, in particular, is required. Caching was the only option I was concerned about.
I am assuming you are using Nginx Proxy Manager and not vanilla Nginx.
Jellyfin 10.10.7 (Docker)
Ubuntu 24.04.2 LTS w/HWE
Intel i3 12100
Intel Arc A380
OS drive - SK Hynix P41 1TB
Storage
4x WD Red Pro 6TB CMR in RAIDZ1