also, for a lot of use cases (eg accessing your home-hosted stuff, on the go) simply tailscale, even without funnel, is fine