I finally had the brilliant idea to install #SaltStack minions on all my various servers (both in my home lab as well as scattered across several cloud providers), and I set up a #Tailscale ACL to let all those minions reach back to the master.
This is going to dramatically simplify how I manage those systems, and I'm pretty thrilled to have done it without having to punch any holes through firewalls. Tailscale is such magic!