Actually you can… I do that with my setup. Just point your domain to the new ip assigned by tailscale to your server. Thats all. Recently they started supporting the https certificate also… Even though it’s not needed, for internal only communication.
The site is Sansec. They uncovered it. They also specify how the malware redirects users to sports betting sites.