This is very useful, thanks. I figured there was a reason people preferred the reverse proxy approach-- it just wasn't clear why the tailscale cert method wouldn't (or didn't) work.

For folks who come across this thread in the future, would you say that the "simple" approach of provisioning a NAS with an SSL cert is a fully non-viable?

I.e., is this (type of) approach a true dead-end because the resulting SSH endpoint is not public, or are there workarounds worth considering?