If I am understanding your question correctly, tailscale has that built in. Look into "tailnet lock".

Check network permissions for the vaultwarden app. Also are you running a firewall app on the phone?

Maybe have a look at the vaultwarden server logs to see if its attempting a connection.