@soatok I'd love to see an open implementation of this.
I had considered setting up Tailscale, but opted for DIY hub-and-spoke setup just so my remote support system for some family members could be a package natively in the repositories (wireguard-tools for wg-quick) and a few systemd files - unlikely to break, even with distro upgrades. Plus, I learned more things!