My tailnet does everything my old VPN did, minus the invoice.
My homelab runs on identity, not an address.