The “best” setup (simplest to maintain, not to set up), is using docker to host jellyfin, sonarr, radarr, lidarr, transmission with wireguard VPN, and prowlarr for all of your media needs. Jellyfin plays stuff, sonarr manages shows, radarr: movies, lidarr: music, prowlarr: your sources for said media. Transmission + wireguard VPN for the downloading.
But then you are getting into self hosting stuff which opens up a whole good, but time consuming rabbit hole