I’ve written up a guide on running Vaultwarden via Tailscale; imnhso one of the simpler and more-secure ways of setting up a self-hosted Vaultwarden server. It uses Tailscale for private (and public if desired) connectivity, with their Serve reverse proxy handling TLS. This is a very simple and secure way of self-hosting Vaultwarden especially if you’re already using Tailscale.
TailscaleI’d be happy to contribute this to the VW wiki if deemed useful.