Create a new tailscale
firewall zone.
Make the zone forwardings look like this:
Run tailscale
advertising the lan subnet, e.g
tailscale up --advertise-routes=192.168.2.0/24 --advertise-exit-node
Go to tailscale Admin console->Machine->Edit route settings
That should do it.