Newbie looking to check in on current progress and questions about restricting access

Hi everyone, I am a total newbie to the world of self hosting but have been getting set up due to wanting to use RomM with its upcoming integration into Playnite, Cocoon, and Manic EMU. My main server is just my normal home PC. I also made a Cloudflare domain that is tunneled on my server. So far, I have RomM, BookOrbit, Portainer, and some "tailscale-nginx" set up on my Docker. I attached RomM and BookOrbit to my domain using the Zero Trust function to add "Published Application Routes" to my tunnel so it's set up like "romm.domainname.com" brings me to localhost:80 and that works perfectly too as long as my DNS Record is set to Proxy. I can even access it from other devices... But the problem is that it can be accessed from any device. I am trying to restrict access to this and it seems like the easiest way to do so would be using my Tailscale IP, but whether I use the IP assigned to my server or my tailscale-nginx set up as a DNS A certificate it doesn't seem to do anything. What's weird is that this WAS working yesterday and then suddenly stopped and I have no idea why. I've spent way too much time trying to figure it out and just decided it's time to ask for help. I have tried making a policy on Cloudflare to only allow my server IP, tried toggling the proxy/DNS setting, tried redoing my DNS records, etc but just can't figure out how to make it where you're only allowed access if you're on my Tailscale. My overall plan would be to have a cool set up with media involving books, movies, games, and then be able to share it with my family and my partner's family by adding their devices to my Tailscale, but I am not sure if that's feasible or if there's a better way to restrict like that. I just saw a post that someone shared about having a sort of central hub that connects to various applications and that's exactly what I am wanting to set up too. Also unrelated, but as my server is just my home PC, I don't really have a ton of storage space and am not sure if it's ok to just leave my computer on 24/7 like that. I guess the computers at work are on 24/7 no sweat so it should be fine. But for storage in this day and age, have other new people been shelling out for a NAS or more relying on cloud storage? I know the ideal would be both but I just want to know where a good start point might be. Thanks for any help that anyone can offer. EDIT: I am at work right now (really earning my pay) and just figured out how to get the SSL/TLS Origin Server certificate made which generated an Origin Certificate and Private Key that I need to put on my server, which will have to wait a few hours until I'm home. But would using that on my server, and then Tailscale so that everything connects to my server, be the way to go?