https://blog.puvvadi.me/posts/ssl-certificates-for-tailscale-nodes-with-nginx-proxy/