Headscale

Homelab
Tailscale vs Headscale: What Self-Hosting the Control Plane Changes

Headscale moves Tailscale-compatible coordination, identity integration, policy distribution, upgrades, and recovery into your infrastructure. It does not automatically move peer traffic, remove DERP, or eliminate endpoint and application security work.

Read this guide