Gemma 4 12b unified as a q6 gguf fits with about 24k context inside your vram. koboldcpp+sillytavern works well on the software side.

Congrats! Then you have a guide for an easy reverse proxy right inside your router. :)
Try it out and see if that doesn’t fit you better than the nginx proxy manager.

The main point was that if your mini-pc running the proxy is also behind a windows docker desktop install it too will have incoming connections appear as 192.168.65.1.

A solution then is to switch to a linux docker host where you can get rid of that hidden NAT. There are many webuis for docker such as dockge and portainer on linux without having to use the terminal.

My preffered solution would be to switch to a router/firewall with reverse proxy support such as opnsense with haproxy and skip the nginx proxy manager completely.
Having the proxy configured in the same UI as vlan, port forwarding, nat rules and so on is nice. https://opnsenselab.com/posts/opnsense-haproxy-reverse-proxy/

Long shot but you might’ve solved the nginx x-forwarded header multiple times without seeing it if the nginx proxy is behind the same bridged docker desktop system setup on your minipc then the visitors IP will show as 192.168.65.1 to the nginx proxy too so you forward that same ip to jellyfin even when it works.
An easy check would be to spin up nginx as a vm instead of a nginx reverse proxy docker image and see if it works.

No real solution, but a lot of chatter regarding that:
https://github.com/NginxProxyManager/nginx-proxy-manager/issues/674

You can always contact techaro.lol and ask if they’re willing to setup a secondary domain for you.

Or you can use others endorsements of the product to give it weight.
"The Linux Foundation uses Anubis to protect git.kernel.org and lore.kernel.org and seem very satisfied with the result.
For the low cost of 50USD/Month we get a custom branded version of it.

• https://social.kernel.org/objects/1bb84190-f207-4adc-ac0e-8eb87a8a60f9"

I imagine Anubis looking like that is because professional settings really should sponsor when using open source.
https://anubis.techaro.lol/docs/admin/botstopper/
https://github.com/sponsors/Xe

https://docs.docker.com/desktop/features/networking/#how-containers-connect-to-the-internet
I think your discord friends are right.

Outbound traffic from the container is sent through Network Address Translation (NAT) using a virtual adapter (typically with an internal IP such as 192.168.65.3). You can view or change this with the Docker Desktop settings.

Traefik merge code written by AI, f.e. https://github.com/traefik/traefik/pull/13397
As do Caddy, such as https://github.com/caddyserver/caddy/pull/7492 and https://github.com/caddyserver/caddy/pull/7666

They seem to merge AI code too, from OPs codeberg link: https://github.com/nginx/nginx/pull/1451

I think pivoting to BSD is the easiest way to find solutions that aren’t tainted by AI.
https://www.openbsdhandbook.com/relayd/

An example of OpenBSD denying AI code contributions:
https://marc.info/?l=openbsd-tech&m=177411620801633&w=2

edit: Seems even OpenBSD is tainted nowadays, from your own link https://github.com/openbsd/src/commit/9c2b8e445a0bdfafdd6148b1760f00aa5429627b and https://github.com/openbsd/src/commit/e9af5eb5a61d189327b553b24d0d31f19c64b63f

edit 2: Here’s the only relevant mail threads I found regarding the AI contributions in openbsd
https://marc.info/?l=openbsd-misc&m=177513420401322&w=2
https://marc.info/?l=openbsd-misc&m=177573214912349&w=2

Completely depends on where you are too, my NAS uses ~30W, which means ~22kWh in 30 days, which translated into local electricity costs are 53SEK or $5.39.
It has enough CPU (Intel Celeron J4125) to run my production loads, RAID1 16TB drives and 18GB RAM so it successfully hosts DNS, DHCP, Jellyfin, Vikunja and network shares. And I get the knowledge that it is all local and under my control.

I haven’t done it myself but Eufy cameras seem to be among the easier ones to flash. :)
https://github.com/themactep/thingino-firmware/wiki/Camera:-Eufy-E220-‐-Ingenic-usb-firmware-installation

https://www.youtube.com/shorts/sRiBUtaGxl4

Thingino makes sure your cameras are yours and no one elses, they have a list of cameras that work with it:
https://thingino.com/

I recommend that you look into nagios and zabbix before you get started. Both have free selfhosted open source solutions. And both are used professionally on the enterprise level so you even gain a skillset that can earn you money!

https://www.zabbix.com/download?zabbix=7.0
https://www.nagios.org/downloads/nagios-core/thanks/

(do we still call it that?)

Primary and secondary is what it is usually called today. I know both Microsoft and Cloudflare does at least.
https://www.cloudflare.com/learning/dns/glossary/primary-secondary-dns/

Check if you need a flag when starting it to bind 0.0.0.0 instead of 127.0.0.1