Running everything through Tailscale only, no WireGuard or extra apps
A user on Starlink behind CGNAT shares a setup that runs everything through Tailscale alone, dropping WireGuard and RustDesk, with Muse on the tailnet and SSH verified by hardware identity rather than hostnames. The thread is a practical reminder that a private mesh network removes port-forwarding entirely, though keeping a second access path matters for emergencies.