https://github.com/shayne/tsnet-serve

Expose local web applications to your Tailscale Tailnet or to the Internet (with Funnel) without opening ports or dealing with (CG-)NAT.

tsnet-serve is a reverse proxy for your Tailnet.