I am hosting 2 public game servers with my setup. My VPS exposes only those ports and I have my DNS on the same provider. That tailnet only has those servers and the VPS. The actual server boxes block all traffic except through the tailnet. The hard part is the reverse proxy on the VPS if you have never done it before.