This is the first step in Embrace, Extend, Extinguish.
We run a headscale service that exposes a magic dns for the tailscale clients. Everything that needs to be reachable gets an entry in a static ip table with names {service}.ts.example.com resolved by headscale's magic DNS. Everything is accessible in the tailscale network and nothing from outside of it.
We did not enable https for inside the TS network since it's all wireguard anyhow.
- They absolutely can fire you in Germany after the Probezeit in Germany. Don't ask me how I know.
- Leave your current company. You know it's time.
- Do not settle for less than what you think you are worth. Every (future) employer will try to screw you. If they were really trying to save money, they'd be hiring for remote work in Romania or India.
Locality Sensitive Hashing. Not sure if it's more algorithm than data structure, or even if it's obscure, but it is very cool.