For me it was CG-NAT. Pretty much the same as the double NAT HeavyRaptor has pointed out, just now something you fix yourself.

I am lucky and for a reasonable price can have a fixed IP for my broadband.

That made Jellyfin work perfectly, over a VPN using Wireguard.

It was more difficult setting up Wireguard than it was getting Jellyfin working!