a mediabox. maybe a small PC or a big one. but if you know what is a VLAN, how routing works, and how your router works, you can make it safe to connect it to an internal network with only a jellyfin