I was making a service that's half public hosted, and half on tsnet https://tailscale.com/blog/tsnet-virtual-private-services/ server the other day, and this is exactly what I was looking for.

Having an app that can setup its own completely secure networking no matter where it's run is game changing, as soon as I get into the alpha, the Cloudflare tunnel it's on right now is going down!