I'm not OP but I'm using the same. Setting up file and network sharing using Tailscales DNS service is trivial.
So instead of opening ports and stuff like that, I can just securely go to https://mynas:12345/ (port of my paperless instance) and I'm in there.