Can confirm it works. I have jf over tailscale.

I use my own domain but could be done using tailscale urls if you dont want to deal with certificates, split horizon dns, etc.