It’s been running on caddy + duckdns for 5 years or more now. I use a non standard jellyfin port for the port forwarding, so that probably helps. Also, there’s probably an aspect of security by obscurity.