Yes, but there’s a lot of people that lurk to learn in these forums. So I just wanted to explain it to them.

For those wondering why this is downvoted 192.168.X.X are local ips. Meaning on local connections use that IP, and is not available to the wider world to use.

Removed by mod

Removed by mod

So the general tailscale actually uses peer to peer wiregaurd connections. Headscale is the middle point to negotiate these wiregaurd connections.

So none of the traffic moves through the VPS.

As for a VPS itself, it’s noore unsafe than your local bare metal. It’s still an application publicly exposed and needs basic precautions like fail2ban or crowdsec