Mine just works with Wireguard. I took a couple extra steps to make it convenient: 1. Public DNS entry gives jump box IP. With some http forwarding the Letsenc

Mine just works with Wireguard. I took a couple extra steps to make it convenient: 1. Public DNS entry gives jump box IP. With some http forwarding the Letsencrypt flow initiated from the internal Jellyfin server. 2. My Wireguard server (running on the jump box) runs dnsmasq and answers DNS queries for wireguard clients with the wireguard IP for the Jellyfin server. 3. DNS server on the home network gives those internal clients the local IP. Works great now; obviously not plug and play but I had fun setting it up.