Mastering Tailscale ACLs and Subnet Routing

How I replaced my clunky VPN with Tailscale subnet routing. Covers ACLs, auto-approvers, and the Linux routing table hacks needed to make it work with Proxmox LXC containers.