I managed to get this setup: cloudflare (not tunnel) and nginx. I hope all is well with security, certs as I have vaultwarden there (behind 2fa).

Is there a way to check security of this connection? I used Mozilla Observatory and similar. My worry is that I see traffic from other countries (analytic in cloudflare). Should I worry or this is normal scanning?

I now locked cloudflare so it is only accessible from my country.

thanks. So lets say I want to open Bitwarden app on android, and the vault is on NAS, I need to open the tailscale app first on that mobile? Sorry if this is a silly question.