I'm no expert, I don't like tailscale too much but it has the advantage that it works on all LibreELEC versions that I know of and I can't say the same about its main ZeroTier alternative, it also works on all networks, even with CG-NAT . Another thing I don't like about tailscale is that it generates a lot of autoconfiguration network traffic.
What I really like about tailscale is the ease of setting up a VPN server to share with our friends and family who should never be able to access our internal network beyond the server. My family enjoys almost unlimited cloud storage and VPN for zero euros on a LibreELEC server thanks to tailscale.
Tailscale naturally also makes it easy to create our VPN virtual private network where each device can be in a different geographic location. The free version only allows a single subnet virtual router.
The SSH command I use to install tailscale is:
docker run -d \
--name=41641-tailscaled \
-v /storage/.config/dockers/tailscale/var/lib:/var/lib \
-v /dev/net/tun:/dev/net/tun \
--network=host \
--privileged \
--restart unless-stopped \
tailscale/tailscale \
tailscaled
#
# SERVER CONFIG:
# docker exec 41641-tailscaled \
# tailscale up \
# --accept-routes \
# --accept-dns=false \
# --advertise-exit-node \
# --advertise-routes=192.168.x.0/24 \
# --snat-subnet-routes=false
#
# CLIENT CONFIG:
# docker exec 41641-tailscaled \
# tailscale up
#