Hacker News Reader

Never heard of headscale before. Doesn't it require the control server to be accessible publicly?

Yes, that's the trade off. Let someone else manage the control server, or manage it yourself - not self hosted vs self hosted