zlacker

I think it’s easier to manage, plus you get ACL functionality. You can use Headscale for the control server and tailscale clients.