Your reverse proxy should have a cert with HTTPS.

https://github.com/jmshrv/finamp

Jellyfin equivalent which doesn’t require a subscription for your own media library.

Use SwiftFin app instead on Apple TV, but better than the Jellyfin app.

This ^

Simple, no ads, and handles HDR super well

I’m sure google will fix that in chrome, like killing adblocker functionality.

Less HTTPS = easier government & advertiser data collection

Corporate nets use 802.1X authentication, risk of a DHCP hijack is very low.

As someone who works in large corporate networks, we absolutely don’t assign static IPs outside of core network gear, it’s impossible to manage a fleet of servers in this way with scaling in mind.

Instead of doing a manual action in two different places and having to keep them in sync, just do it once on the DHCP server. Setting a static IP on the server is superfluous.

good general advice until you have to try to explain to your SO the VPN is required on their smart TV to access Jellyfin.

don’t do this, use DHCP reservations instead so you actually have a list of all your servers and most routers register hostnames in DNS for you which is even better.