Tailscale Vanity Domains and TLS

Over the past year I&rsquo;ve been moving a lot of my personal infrastructure to connect via Tailscale . This has let me reduce the Internet-accessible attack surface on some of these hosts, in some cases removing all public presence. Many of these hosts serve internal websites (like FreshRSS ), for which I want a TLS certificate. Previously I would use the ACME HTTP-01 challenge type, where you…