BruisedMoose

I’m in camp #2. Only my Gmail address can access my apps from outside my home. It’s a little bit of a pain to configure the rules, but once it’s done it’s done. I’ve been happy with it.

You do need to have a domain name though.

Once upon a time. But my understanding of this:

https://blog.cloudflare.com/updated-tos/

Is that so long as you don’t use their CDN for your content, which is where the bypass cache rule comes in, you’re okay.

Given your requirements, IDK why people are recommending different VPNs and such. No way I’m going through that with my mom.

For me, the easiest route was Cloudflare Tunnel. No need to fart around with exposing ports, has some baseline security, TLS, easy for my users.

The only thing you’ll want to be sure to do is create a cache rule to bypass caching on your jellyfin domain.