Yep. Tailscale uses wireguard under the hood so that setup sounds exactly the same.

The Cloudflare tunnel is free. They don’t seem to have a traffic cap either. They’ll charge you if you want to use a non apex domain (e.g. subdomain) or if you need their more advanced bot detection/defense products. But a basic/standard setup like what us self hosters have is free.