https://github.com/simonw/til/blob/main/llms/codex-spark-gpt-oss.md
Running ollama bound to 0.0.0.0 binds to all interfaces, so anyone on your local network could access it. Why not bind to just the tailscale IP instead? That way only you and specific people you trust can access it.