tailscale-acl and tailscale-webhook
Network access rules kept in git, and alerts to Telegram when the private network changes.
how it works
ACL hujson + apply script; Cloudflare Worker turning Tailscale webhooks into Telegram messages.
Automation: Something that runs on a schedule by itself.
The code for this one lives in a private repo. This page explains the idea so you can build your own.