Leaving this completely unrelated link to a better alternative here: jellyfin.org

Jellyfin really needs to work on security and server discovery.

As it is right now you have to manually input the server URL unless it’s on the same physical network, discovery won’t even work with broadcasts across VLANs, or over the internet.

I think the better answer would be to not expose Jellyfin to the internet.

Although it would be cool if it integrated with something like p2panda or libp2p

And with that it loses any edge it had over Plex. If I have to install a VPN on every device of every user, just because the project wont adhere to basic security practices, then I will not switch to it.

I still would choose Jellyfin over Plex in a heart beat. You don’t need to switch if you don’t want to.