In my understanding fail2ban will block ips if they are detected to do brutforce or use known exploits.

Crowdsec will share this IP via a blocklist to all subscribte systems. You will benefit form the detection of other systems and not only your own.

I can recommend the video The science of catching up in life

Docker containerizes jellyfin. If you use proxmox you don’t need to containerize in a “container”.

I always wondered if this is possible.

I had a 4 year old phone that I had to charge twice a day. I figuered I switch the battery with an official branded replacement which had costed around 100€. The difference between the old and new battery were unnoticable and I still had to charge the phone twice a day.