Whole Network VPN

Is there a way to have a single machine/docker on a LAN and allow to route traffic to it from the network to reach far side ? I understand that it works for going in to the network, but Im advertising a subnet to tailscale and not able to put tailscale on every host on the LAN, but Im missing on how I can NAT and route in a different direction from LAN to tailscale?

2 parts on each site, a Tailscale node with subnet routing and a route set to the subnet from your router pointing to the local Tailscale node

I was looking at that before, and Im not sure how to do this with docker.

I’ve looked at doing it with docker, and found that when doing anything more complex than exit nodes, or putting docker containers on the tailnet, that it’s a far better idea to put it on the host directly. Otherwise you’re getting into messing with networking on a docker host that already has pretty complex requirements. It’s doable, but gets pretty complicated.

I kind of want to try it, but now thinking of making a VM just for tailscale and use that. On one side I do have it on the proxmox cloud host, but on the other end its my home network, and I want all machines on my LAN to access the far end host. I`ll play around with it a bit more I guess. Problem with Docker, is I dont see how to even bash in to it, to make any changes, or how to point a route to it from the host, it just doesnt forward traffic.