

Yep. Tailscale uses wireguard under the hood so that setup sounds exactly the same.
The Cloudflare tunnel is free. They don’t seem to have a traffic cap either. They’ll charge you if you want to use a non apex domain (e.g. subdomain) or if you need their more advanced bot detection/defense products. But a basic/standard setup like what us self hosters have is free.







Might I suggest Bitwarden.
It’s open source, syncs across every platform I know of, and supports passkeys.