Tailscale funnels

Here’s a decent list on awesome-self-hosted

check out vouch proxy.

This is the right answer.

The only other solution I can think of would be to put a device in the middle (such as this router).

You can use cloudflare tunnels to do the same. No need for tailscale

Awesome. I didn’t know about this. Thank you

If OP wants to expose it to the public, tailscale isn’t an option. Cloudflare tunnels is the way to go.

Maybe caprover gets you close to this?