Late last year, I called Tailscale my most important recommendation for anyone starting a home lab, and I still mean it. It let me actually use my self-hosted services remotely without making network security the first hard blocker I had to clear. No firewall rules, no port forwarding, and Caddy still handling my certificates the way it always had. Things just worked.