Create a new tailscale firewall zone.
Make the zone forwardings look like this:
Run tailscale advertising the lan subnet, e.g
tailscale up --advertise-routes=192.168.2.0/24 --advertise-exit-node
Go to tailscale Admin console->Machine->Edit route settings

That should do it.

