I'm using caprover on a Linux VM with tailscale and cloudflare. Works great, it does require some tinkering because caprover doesn't like not being in control of SSL, and the nginx configs need to be manually edited per app if you want to set up headers for cloudflare real ip and stuff.

Sounds like a nice setup.

I like being able to choose if I don’t want to maintain or think about it again, then going one direction.

If it’s something I will be tinkering with, a different direction is better.