set up my DEFCON EAP wifi and got my tailscale exit-node setup working again, woo. weird issue where I can't route to services on my tailscale exit node, but i was able to set up my NAS at home as one to stop-gap instead.

Had to rebuild my NixOS with a new firewall option, too:

# warning: Strict reverse path filtering breaks Tailscale exit node use and some subnet routing setups. Consider setting `networking.firewall.checkReversePath` = 'loose'