Waiting for a five hour #QubesOS backup to finish... This is my least favorite part about using #Qubes

I'm running a service behind #Nginx on a #Linux server connected to bother the public Internet and a #Tailscale tailnet. What's the simplest way to restrict access to that service so that only clients also on the same tailnet can access the service? #FOSS #Devops #PrivacyTech