Plex is excellent, and even if you prefer the features or interface of Jellyfin, you should never expose any application (Plex, Jellyfin, or otherwise) directly to the Internet. This should be non-negotiable. Plex solves for external access with the mobile/desktop apps and app.plex.tv by brokering client connections into your network without a NAT/PAT on your router or firewall.

For a music library, even a small one, tracks should have proper metadata applied to them and be stored in directories. Plex provides guidance on this here: https://support.plex.tv/articles/200265296-adding-music-media-from-folders/

My own strategy: I deviate slightly from Plex’s file and directory naming strategy, but it works perfectly. I start with high quality music, mostly from Bandcamp and process it through Musicbrainz Picard into ALBUMARTIST\YYYY - ALBUMNAME\01 - TRACKNAME.FLAC. Picard sets the metadata and ensures that there is an album cover image also.

Before moving the organized files to my Plex server, I run them through MP3Tag and overwrite any mismatched artist names with the album artist (getting rid of artist fields with 'feat xxxx artist’s). This is important for when I sync files in Media Monkey to my iPod, since the iPod would break apart albums with multiple artists. My preference is to keep them grouped together.

Hope this helps good luck 👍. Let me know if you want to know a decent strategy on movie backups also.

I used it on an Android DAP to sync my music collection from my NAS after giving up on Folder sync due to its issues with new file detection breaking after a daylight savings time change. Synching was definitely more reliable but it takes ages to do the scan.

You do not need to port forward to share a Plex instance over the Internet. App.plex.tv manages the inbound connections automatically. All you need to do is manage invites to your friends. They log in with their email/password or with Google SSO to app.plex.tv and your content will be available over a secure connection with no port forwarding.

Plex should not be accessed externally using a port forward. Always use app.plex.tv as it prevents unauthenticated users from seeing the instance.