Tailscale Services looks really interesting:

Tailscale Services lets you assign stable virtual IPs (TailVIPs) to any logical resource—databases, internal APIs, even whole clusters—so you never renumber when servers move or scale.

Each service gets automatic HTTPS certs and fine-grained ACL tags, cutting both setup time and attack surface

CC nostr:npub14tq8m9ggnnn2muytj9tdg0q6f26ef3snpd7ukyhvrxgq33vpnghs8shy62

https://www.youtube.com/watch?v=mELAg50ljSA