I am new to networking and still learning a lot of the basics, it has been rough but also fun. I am at a point where I have coolify setup and a homepage at -mydomain.com, accessible publicly. I am now trying to setup tailscale, and I just blindly tried to get the one-click tailscale-client service to work, but I couldn't. After a bunch of headaches involving docker networking and tailscale documentation, I came to the conclusion that I would have to have a tailscale sidecar in each service I setup. Correct me if I am wrong though. It seems there is not that much information about the tailscale-client service. I went through some PRs not finding anything there either.
Any resource I find about setting up coolify and tailscale just sets up tailscale on the host machine, no docker involved. So is that the best way? My end goal is having the homepage accessible by anyone at -mydomain.com and then having subdomains only accessible by devices that are a part of my tailnet (e.g., jellyfin.mydomain.com). So I would also like to know what your opinion on this sort of setup is.