I recently found the video of spaceinvaderone and wanted to kinda copy his tailscale setup. (plugin tailscale) It works but I don't have SSL when I use it like he does it. So I searched and found another tutorial which seems to do exactly what I want:

I created a custom network for tailscale-dockers. Then I setup the tailscale docker container assigned it to the custom docker network and then I setup the nginx reverse proxy container that uses the network of the tailscale docker container.

I setup my domain from strato. the a record pointing to the IP of the tailscale docker container. I can login at nginx like that.
o I figure that my setup is probably correct up to this point.

Now I wanted to access my vaultwarden container.

I setup a subdomain to my domain and pointed it to the ip of the tailscale docker too. I changed the existing conatiner to the custom docker network that I used for the tailscaler container. I setup a proxy host in nginx for my subdomain and pointed the it to the internal docker ip of the vaultwarden container. but somehow it does not work ...

I logged into the nginx container and from there iam able to ping the vaultwarden container so it should work like that, or do I miss something ?

Probably best to ask in the Tailscale plugin support thread.