jellyfin.your.domain {
    @denied not {
        client_ip 192.168.178.0/24  # IPv4 range
        client_ip fd00::/8          # Common private IPv6 range
    }
    abort @denied

    reverse_proxy http://localhost:8096 {
        header_up Host {http.request.host}
        header_up X-Real-IP {remote_host}
        header_up X-Forwarded-For {remote_host}
        header_up X-Forwarded-Proto {scheme}

    }
}