funnel and serve are also awesome, but in this case the use case necessitated a single binary that worked without the full package installed/didn’t touch the routing table or tun device
I had some issues with builds every once in a while, which is another reason I switched to using tailscale serve instead.