And I’m in a similar place as you though I’ve managed to get a bit further. I’m using docker and caddy sidecar with tailscale. I’ve started with nextcloud aio that had all neatly explained here and I’ve built on top of that. I’ve added other services like immich, jellyfin. I’m also testing local reverse proxy with the same domain (*.ts.net) as through the tailscale (to get their certificates), so that I can access them locally without tailscale. I want to use it mostly locally and only occasionally remotely. You might also learn something from this tutorial