I got a small network running with Linux, android and Windows, but seldom use it. Windows install worked fine, but it remember it was not well documented (needed to use some argument for it to setup the service). Don't use nextcloud but I do have vaultwarden working over it.

I'm planning to move to headscale due to the certificate management overhead.

That sounds interesting, which one was it?