I'm looking into ways to access my home network which is behind a CGNAT. Tailscale looks like the best solution so far. I would like to clarify a doubt on Tailscale

I have a domain name registered with one of the popular services out there. I saw that Tailscale uses MagicDNS. But I wanted to use my personal domain. My doubt is if I want to use my custom domain with Tailscale, the following will be the procedure,

1. Setup Tailscale account and add machines.
2. My device inside the home network will get a Tailscale IP assigned. From 100.xx.xx.xx pool
3. Use this IP to configure an A record in my Domain registrar.

Now when I try to access this domain what will happen is,

1. DNS server will resolve the Tailscale IP.
2. The outside client will try to connect to my machine in the home network.
3. Tailscale takes care of the CGNAT part and helps to establish a direct connection.
4. Clients will use the public keys to establish trust and will communicate with each other.

If there is anything wrong in my understanding please correct me. I could not get a clear cut answer on this through searching.