Kind of a quick off the cuff question… but is it difficult to get a docker hosted jellyfin server accessible outside of lan safely?
I have tailscale and a VPN I can use for my own devices but would like to be able to access it safely without needing those.
Stick with the VPN. No point in exposing more services with possible security vulnerabilities.
If you are not behind a CGNAT, it should be as easy as opening the necessary ports.
I have a reverse proxy running in ports 80, 443 and can safely access Jellyfin on a subdomain without issues from outside my LAN.
Depends on your definition of safe.
If you do a public port forward and set up basic security and proper SSL its safe from the majority of people.
You can but it will cause security issues. You will need to buy a domain and setup a SSL proxy with https to proxy traffic in. After than I would lock down you firewall rules and make sure that a compromise can’t escape the isolated environment.
Also make sure you docker container is hardened against excaping as it will improve security when a security hole is discovered in jellyfin