• you can create memorable links instead of memorizing port numbers: jellyfin.foo-bar.ts.net

BTW, I’m doing something similar with standard DNS records that point to an internal Tailscale IP. I can go to immich.mydomain.com which only works if Tailscale is active. Let’s Encrypt works too. Obviously the setup isn’t automatic but it’s automateable for more adept self-hosters.