I don't think headscale will work over tor, the clients would need to be on tor to connect, which makes tailscale moot. Headscale is meant to be on a public IP/DNS.