I suspect you’d have trouble opening ports on the client’s machine. Maybe you could use a dedicated http proxy the client talks to

Tailscale funnel should work. I'll double-check when I'm back home if someone else hasn't.

A custom service worker might be able to proxy for you without needing Tail Scale.