Basically yeah.

CNAME points my.domain to *.machine-that-hosts-caddy.my-ts-domain.ts.net caddy running on that machine directs subdomains to machine:port pairs, where “machine” is either the tailscale name or IP for the machine hosting the service