[wild_egg]

check out tsnet if you are building on tailscale anyways. your app can then be a tailnet node that can read tailnet WhoIs data and have access controlled via tailnet ACL

[asar]

really cool! didn't know this existed, thanks! Going to have to figure out how to make this work with headscale though, looks a bit tedious.