Post #2730112

personally I just use headscale with tailscale clients and mullvad vpn via wireguard on the control server. there's a bit of systemd magic required to make sure wg-quick starts before headscale does. dns is setup via a pihole device and I just point headscale's config at that device for dns. it's a pretty simple setup, but I have no issue doing everything via cli so this works well for me.