I doubt this is a thing, but is there a VPN tunnel like headscale//tailscale that allows a person to approve a client connection from the app or elsewhere for another device without it? I'm asking because I want to use devices like tvs with jellyfin but behind tailscale as well. Is this a thing? I don't know exactly how the app works, so don't crucify me lol.
I'll let you know when I look into it more, but it seems like firezone is pretty close to what I wanted