I don’t know if this is the right place, I don’t even know if this will post but I had a Jellyfin server setup with a router and static IPs however with my ISP supplied router I have to use my router as an AP or I’m double natted, no IPV6, the dumb thing is that I can’t set IPs static on ISP router. There’s got to be a way around this but I can’t seem to figure it out.
Tailscale has been excellent for me who is in the same situation as OP.
Yes, that is the way to do it privately. Remember though that these constructed VPNs can still leak meta data. They’re not perfect but for a few friends, I don’t think anyone is going to bat an eyelash. I’ve been trying to get Nebula to work because I really want to use a system that is completely open source. I know somebody reverse-engineered the server component and calls it Headscale but I am hesitant to use it.