If you are seeing this page, then I've managed to successfully make my server public without any security compromise.
Currently running my music server (using Navidrome) from an older laptop (i3 6th Gen). Maybe I'll make that public one day as well.
Served securely via Tailscale Funnel on Nginx.