ddns implies that something at your house will run in the background, check for your ISP given IP address to change, and then update the corresponding DNS A record on the authoritive name server.
Now that I know you are using tailscale then please disregard.
All I know is that this config won't work with tailscale:
SSL Endpoint IP where TLS is expected to terminate: 100.1.1.25
DNS A record: 45.4.2.24
Actual endpoint termination attempt (because of DNS A record): 45.4.2.24
Where 100.1.1.25 is the IP of your actual server and 45.4.2.25 is your router connected to your ISP.
...
If you got rid of tailscale then port forwarding could route the https request to the desired endpoint.