Just to be clear I was joking. I don’t want to bomb anyone ever.

Must be time to bomb them back into compliance with western values.

In a similar vein you may also find this helpful:

https://tailscale.com/kb/1281/app-connectors

https://tailscale.com/kb/1223/funnel

Ok so I guess what I’m confused about then is why you didn’t use Tailscale MagicDNS which is already integrated and used for this purpose.

https://tailscale.com/kb/1081/magicdns

If at some point you find a way to articulate your actual goal let me know and I may have a better option for you.

Another option again assuming your goal is to access the synology NAS via the public internet. You could use synology built in quick connect service and that would get it done.

If your goal is to simply be able to reach the NAS remotely over the internet you don’t need to open ports or use reverse proxies. You can simply access it internally via the tailscale grid just as if it were local to you like on a LAN. As long as your client is on the same tailscale net as the NAS and has open ACLs this will work fine. It’s sort of unclear to me as to what your actual goal is.

If your goal is to expose a web server to the internet I recommend you use cloudflare zero trust and create a tunnel. This would solve any ssl certificate issues and would also get rid of the need to use any kind of reverse proxy as cloudflare would be acting as a reverse proxy. There are other options of course but this is the simplest for web based services.

Tailscale has a feature which assigns you a random network subdomain off ts.net. You can use it to find any system by name. But also you don’t need it. You can usually just access the services via the host name if your client is attached to tailscale and also has open ACLs for the services you are accessing. as far as i know there is no way to do what you are trying to do and I’m not sure why you are trying to do it. if you are trying to make a service public you probably want to use something like cloudflared instead.