You can self host the control plane for Tailscale using a community project called Headscale. I use that along with Headplane which gives you a nice admin web UI.

Then you just use the tailscale client on devices like normal but you authenticate new clients with your endpoint instead of the centralized one.