[l72]

With regards to keeping the service behind a VPN, I have a few questions:

1. How do you deal with various devices (Roku, Smart TVs, ...), as most don't seem to have VPN apps for them?

2. How do you deal with airplay? My ipad can VPN to my home network and access jellyfin when I am away, but Airplay doesn't work, as the stream isn't available to the device I am streaming to.

My jellyfin (and navidrome) on my home server has me very happy with the basic set up. Both are internal only, as the only service I expose is wireguard. But I haven't solved the two issues above, which also keeps me from being able to share my jellyfin with my family.

[gh02t]

Android TV can run Tailscale or Wireguard natively. AppleTV has a native Tailscale app, and I think you can also use Passeportout for Wireguard on AppleTV but I haven't used it. Alternatively if you're on the go a lot and want to use a streaming stick in your hotel you can use a travel router that supports VPNs like GL.inet.

Airplay and Chromecast are a different story. Maybe someone else here knows different, but while it's not literally impossible it doesn't really work because of mDNS. A layer2 VPN might, but not so much on Tailscale/Wireguard.