Tailscale now supports HTTPS (https://tailscale.com/kb/1153/enabling-https/). This is useful for some apps that could be exposed through the Tailscale tunnel, such as the Bitwarden desktop app, which does not support Tor.
Currently, the Umbrel Nginx config does not expose port 443. This can be done by modifying the nginx.conf file, but this is not recommended.
It would be great if the Tailscale app, when installed, would open up port 443 and advertise it as a Tailscale service.