Have setup tailscale and pretty happy with it, yesterday enabled TLS so my host have https pretty easy with caddy and reverse oroxy, problem is you can't use subdomains, so every host can only forward one https connection. My main server host several selfhosted services and want them all over https. Have googled an question open at caddy and tailscale forum, anyone here know what route to take?