Jellyfin
192.168.0.59:8096 · Root-mounted, proxied at :443
Plex
192.168.0.59:32400 · Proxy is expected to fail Plex clients — see README, else use app.plex.tv
Open WebUI
192.168.0.59:3001 · Verify it honors the forwarded https scheme
MC Dashboard
192.168.0.59:8082 · Websocket test needed after wiring
Elegoo Centauri Carbon
192.168.0.41:8080 · Highest risk; likely stays on its LAN URL if it misbehaves
Home Assistant
192.168.0.42:8123 · Needs a trusted_proxies edit; your existing :8123 route still works