Tailscale Services looks really interesting:
Tailscale Services lets you assign stable virtual IPs (TailVIPs) to any logical resource—databases, internal APIs, even whole clusters—so you never renumber when servers move or scale.
Each service gets automatic HTTPS certs and fine-grained ACL tags, cutting both setup time and attack surface
CC nprofile1qqs24sraj5yfee4d7z9ez4k58sdy4dv5ccfsklwtztkpnyqgckqe5tcpzemhxue69uhks6tnwshxummnw3ezumrpdejz7qfzwaehxw309akh2mr5d9cxcetcv4ezu6r4wdax7mn9vaujuam0wfkxgtcac7lnk (nprofile…7lnk)
https://www.youtube.com/watch?v=mELAg50ljSA