Set up Headscale with a few test devices on different networks. Verify enrollment, name resolution, access rules, and connectivity when one device changes IP or loses its connection. Test how a user device is revoked and whether access disappears promptly.
Self-hosting the coordination service adds responsibility for backups, upgrades, TLS, and availability. Keep an emergency access path that does not depend on the private network itself. The pilot succeeds when administrators can recover the network as well as connect to it.
Akousa