Tailscale
Your tailnet, reachable by your devices only.
Tailscale gives your machine a stable HTTPS name on your tailnet and terminates TLS itself, so only your devices can reach the board. The tailnet is the authentication: a device that isn't signed into it can't reach the name at all.
Serve the port
tailscale serve --bg --https=443 localhost:9393
tailscale serve statusstatus reports the URL it's serving, in the form https://<machine>.<tailnet>.ts.net. Copy the origin from there instead of composing it by hand. You don't choose the MagicDNS name.
Tell Ntwine the origin
press R, choose Tailscale
Origin https://your-machine.your-tailnet.ts.netNtwine reads your tailnet name while the pane is open, so the field is usually filled in already.
Ntwine checks that a request's Host matches the origin you gave it, so the value has to be the exact origin a browser sees: scheme included, no trailing slash.
Stop serving
tailscale serve --https=443 localhost:9393 offTailscale's syntax changes faster than this page, so check the Tailscale Serve documentation for the current version.