If the personal stack is going to leave my Mac mini, it needs to be transport-agnostic, easy to pair, and graceful about fallbacks. Here is the shape that recommendation takes.

Tailscale's data plane is peer-to-peer and end-to-end encrypted. The control plane is not. Here is what that actually means, and what Headscale changes.