[Unit]
Description=Ensure LAN traffic bypasses Tailscale routing table
After=network-online.target tailscaled.service
Wants=network-online.target

[Service]
Type=oneshot
ExecStart=/bin/sh -c 'ip rule show | grep -q "5200.*192.168.0.0/24" || /sbin/ip rule add to 192.168.0.0/24 lookup main priority 5200'
ExecStop=/bin/sh -c '/sbin/ip rule del to 192.168.0.0/24 lookup main priority 5200 2>/dev/null || true'
RemainAfterExit=yes

[Install]
WantedBy=multi-user.target