There’s a lot of discussion on a very recent post about doing this for Jellyfin. You should start by reading that: https://discuss.online/post/40181742
FWIW it seems Jellyfin has some application-specific authentication/security bugs that complicate things a bit. Of course the same concepts should generally apply, but some considerations will be different depending on what application you’re exposing.
As the creator of that thread, and a Nextcloud volunteer, I can confirm that Nextcloud can absolutely be run without a VPN. That is exactly what it is designed to do, scaling to millions of users.
It is vastly more deployed, modular, enterprise grade, and battle tested. Running it is nothing like running Jellyfin.
There’s a lot of discussion on a very recent post about doing this for Jellyfin. You should start by reading that: https://discuss.online/post/40181742
The state of Nextcloud is not in any way comparable to the mess Jellyfin calls a Backend
FWIW it seems Jellyfin has some application-specific authentication/security bugs that complicate things a bit. Of course the same concepts should generally apply, but some considerations will be different depending on what application you’re exposing.
As the creator of that thread, and a Nextcloud volunteer, I can confirm that Nextcloud can absolutely be run without a VPN. That is exactly what it is designed to do, scaling to millions of users.
It is vastly more deployed, modular, enterprise grade, and battle tested. Running it is nothing like running Jellyfin.