I think maybe TLS would work if you were to go to https://service.yourts.net domain, but I've not tried that.

It works, I’m using tailscale services with https