This (reverse proxy) is essentially what "tailscale serve" does.