The pandas look slightly worried about something but trying to hide it.

I setup AdGuard DNS on the network I host my services on and made Tailscale use it as a second DNS. This let’s me access services using domain names. I’m sure you can do something similar with zerotier but I’ve never used it.

Also, it doesn’t have to be AdGuard DNS. Any DNS will be fine.

https://tenekev.com/posts/internal-dns-for-your-tailscale-network/