Currently, Tailscale exit traffic is forwarded directly to the WAN without passing through the VPN.
You can refer to the previous answer and configuration this in Luci, but it may be unstable or stop working after some time.
Additional scripts may be needed to write for maintenance.