Trying to use a reverse proxy to present my Jellyfin server to extended family, but I’m stuck.

Local is Ubuntu 26.04 (docker(portainer, pihole, nginx, Jellyfin)

Wan side is cloudflare with my domain, registered with porkbun. <fakedomain.com>

I’m comfortable interacting with docker compose yml files, though I don’t fully understand them. I also have a pretty fair understanding of what my Lan looks like, enough to assign static ip addresses to my Linux box and NAS. How exactly does one use cloudflare and nginx to point jellyfin.fakedomain.com to my Jellyfin container safely?

I feel like I’m this close to getting it done, but I get lost at dns providers and encryption/SSL certs.