[0x457]

I don't think you need Tailscale for this.

You need tailscale when:

1) You have a lot of road-warriors

2) You need decent ACLs that isn't just IP based.

3a) You don't ability to directly connect to a site (just one needs to be accessible)

3b) You can't add 3rd site to relay traffic or punch holes in NAT.

4) You're afraid of terminals and/or text editors.

Here is a good write-up on the subject: https://www.procustodibus.com/blog/2021/11/wireguard-nftable...