At some point, somewhere on the internet, someone authoritatively claimed that tailscale is the one and only acceptable solution to getting your jellyfin server outside your LAN and it just kind of took root. nginx has worked perfectly fine for me.