Remote access without exposing ports on firewall?

[watchDominionDotOrg]

Thinking something like Tailscale / ZeroTier, but still maintaining the remote connection type so it's not considered a LAN device with unlimited bandwidth.

Has anyone tried this and did you run into any issues along the way?

[TheDreadPirate]

By default, the address space used by Tailscale is not considered "local".

If you WANTED the Tailscale addresses to be considered local, you would add "100.64.0.0./10" to the "LAN Networks" field in Jellyfin.