Tailscale serve for secure remote access, no exposed ports
Users want secure remote access to the Hermes API server / Open WebUI without exposing ports publicly. Tailscale serve provides zero-config HTTPS tunneling over a private mesh.
— @PaulTisl, 2026, via GitHub.