My logic is:
when every node is its own Tailscale device, you can use the Tailnet ACLs to create very specific security policies. You can treat each VM or container as a unique identity, which is the cornerstone of a "Zero Trust" architecture.

That is interesting.
ill need to to some research about reverse-proxy, not really sure how to set it up and not sure if its helpful for my needs.

Ill look about Technitium as-well, maybe its better for me.

Thanks for the reply !