What's wrong with using vanilla WireGuard? I tried this Tailscale recently and it was a huge mess. It destroyed WireGuard's throughput compared to the kernel implementation and the CPU usage was like I am running a game along with the excessive logging in systemd. One of the worst software I've ever installed on linux.