I use Nextcloud with Nginx Proxy Manager and just use NPM to handle the reverse proxy, nothing in NPM other than adding the domain to the config so it’s trusted.

I use Plex instead of Jellyfin, but I stream it through NPM with no issues. I can’t speak to the tunnel though, I prefer a simple wireguard tunnel for anything external so I’ve never tried it.