I use a VPS and a Wiregusrd tunnel together with geoblocking and fail2ban. I’ve written my setup down, maybe this will help you codeberg.org/skjalli/jellyfin-vps-setup