Struggle for hours and finally figure out a working Tailscale config to set up a bastion host + work with AWS. Needed to expose the VPC's CIDR block so databases and things like that that are running in the VPC are accessible. Got tired of manually whitelisting my current ip address every time I moved around. #devops