- Tailscale UX is better, and the Headscale control server is also
easier to self-host than ZeroTier (although Headscale is not the
official control server, the author now works at Tailscale)
- Wireguard is also added as an alternative to avoid relying on a
third-party service, however it requires port-forwarding
Replaced by Cilium L2 Aware LB.
Additionally, the default Zerotier route was changed to match the
LB IP pool rather than the entire home subnet. This makes it easier
to manage in the configure script and can be updated to any value
later if needed.
