Is it viable to run Headscale on a DMZ in your home network?

Sorry in advance if this is a common question!

I recently finished segregating part of my network, and I am now thinking about switching to Headscale since some of the places I am commonly at block the controlplane for Tailscale. The thing is, I am not even close to an expert in cybersecurity and have most of my knowledge coming from tutorials and a little bit of experimenting.

I know that your public IP doesn't always expose your exact coordinates since those are limited in quantity, but I am still just curious if it is better to try to setup a DMZ for that stuff. I know that things like a VPS exist but those aren't exactly as cheap as they were a few years ago.

I don't HAVE a DMZ right now, but I do have a disabled VLAN ready to go on my OpnSense box, and I am willing to learn about some helpful tools to keep intruders out. Since my network is still a little incomplete, most VLANs only have access to the internet and DNS, not including management which can still see everything.

If anyone here is experienced with that stuff, please feel free to leave a tip. Thank you very much!