I've finally managed to get TailScale to work properly with OpnSense doing what I needed it to do. I will write up a blog post tomorrow both so I don't forget and because it seems to be really hard to find doc's for this setup...