Here’s the setup.

1. You have one or more services running in Docker containers.
2. The devices that need to access those services are part of a Tailscale network (Tailnet).
3. You own a public domain name (e.g., your-domain.com)
4. You want/need to serve those services via HTTPS
5. You don’t want to open any ports or other holes in your firewall.
6. You don’t want to mess with self-signed certificates or create your own private certificate authority.

If this is your situation, this post might help.