We already have a PoC/code working of WireGuard peer discovery/connections without a central VPN gateway. Soon we will publish that module, and you will be able to deploy *your own private tailscale*.