Ok I misuderstood the problem, I thought it was about configuring nginx to listen to the tor onion service which is much simpler.

I get why would someone want to do this but imo a wireguard tunnel is preferable.