TsdProxy + Tailscale + Nextcloud-AIO

[A4alli]

It's amazing to have such an easy solution. I have a docker-compose.yml file for my nextcloud-aio running with caddy as sidecar and Tailscale. Since I am new to TsdProxy and there is no much documentation. Please review the yml file I pasted below and suggest amendments accordingly. I would be great to suggest both ways i-e using without funnel and with funnel feature.

services:
nextcloud-aio-mastercontainer:
image: nextcloud/all-in-one:latest
init: true
restart: always
container_name: nextcloud-aio-mastercontainer # This line cannot be changed.
volumes:
- nextcloud_aio_mastercontainer:/mnt/docker-aio-config
- $XDG_RUNTIME_DIR/docker.sock:/var/run/docker.sock:ro # Running in docker-rootless
networks:
- nextcloud-aio
ports:
- 0.0.0.0:8080:8080
environment:
APACHE_PORT: 11000
APACHE_IP_BINDING: 127.0.0.1
SKIP_DOMAIN_VALIDATION: "true"
WATCHTOWER_DOCKER_SOCKET_PATH: $XDG_RUNTIME_DIR/docker.sock # For Docker-rootless

caddy:
image: caddy:alpine
restart: unless-stopped
environment:
- NC_DOMAIN=nextcloud.xxx-xxx.ts.net
volumes:
- type: bind
source: ./Caddyfile
target: /etc/caddy/Caddyfile
- type: volume
source: caddy_certs
target: /certs
- type: volume
source: caddy_data
target: /data
- type: volume
source: caddy_config
target: /config
- type: volume
source: tailscale_sock
target: /var/run/tailscale/ # Mount the volume for /var/run/tailscale/tailscale.sock
read_only: true
network_mode: service:tailscale

tailscale:
image: tailscale/tailscale:latest
environment:
- TS_HOSTNAME=nextcloud
- TS_AUTH_KEY=tskey-client-abcdefghijkl-hijklmnopqrstuvwxyz # client secret key in full length
- TS_EXTRA_ARGS=--advertise-tags=tag:nextcloud
init: true
restart: unless-stopped
volumes:
- /dev/net/tun:/dev/net/tun
- type: volume
source: tailscale
target: /var/lib/tailscale
- type: volume
source: tailscale_sock
target: /tmp # Mounting the entire /tmp folder to access tailscale.sock
cap_add:
- NET_ADMIN
- NET_RAW
networks:
- nextcloud-aio

volumes:
nextcloud_aio_mastercontainer:
name: nextcloud_aio_mastercontainer # This line cannot be changed.
caddy_certs:
name: caddy_certs
caddy_data:
name: caddy_data
caddy_config:
name: caddy_config
tailscale:
name: tailscale
tailscale_sock:
name: tailscale_sock

networks:
nextcloud-aio:
name: nextcloud-aio
driver: bridge
enable_ipv6: false
driver_opts:
com.docker.network.driver.mtu: "9001" # Jumbo Frame
com.docker.network.bridge.host_binding_ipv4: "127.0.0.1" # Harden aio