Comment by unethical_ban

It's a remote media streaming tool as much as a local one.

I run jellyfin on the open internet through caddy. I've done a few things to the configuration to secure it, like user-agent restrictions and fail2ban for login failures, and excessive 400 series errors. I keep it up to date.