The easiest and most secure solution is probably tailscale. Just VPN into your local network instead of exposing Jellyfin to the internet.

An alternative I am using is Caddy reverse proxy with Authelia for authentication. So I have to log in to Authelia before I can access Jellyfin. Beware though, it took me like 2 days to properly configure Authelia. It is rather complicated.