> with Tailscale for private access

FWIW might want to check https://github.com/wg-easy/wg-easy to remove yet another managed elsewhere piece of your setup.

thanks for sharing, will check it out!