I have less trusted services all listening on my Tailscale network. Network ACLs can then ensure they can't talk to each other and the only thing that can talk

I have less trusted services all listening on my Tailscale network. Network ACLs can then ensure they can't talk to each other and the only thing that can talk to them is the reverse proxy.