Stop Using Tailscale. Use Open Source Instead.

A walkthrough of replacing Tailscale's proprietary control plane with Headscale, an open source self-hosted alternative, while keeping the Tailscale client. Covers deploying Headscale on a K3s homelab cluster, adding nodes to the mesh network, configuring subnet routing to expose Kubernetes pod networks, and solving DNS challenges for accessing internal services remotely. Also discusses trade-offs between traditional VPNs and WireGuard-based mesh networks, and touches on sidecar deployment patterns for more granular access control.