I quite like Tailscale SSH for this, but I don’t have as many machines, so not sure how it will scale. You can definitely assign roles here to allow/deny SSH between hosts in your fleet though.

That was it, thank you!

I have a few of these but I forget where they came from, curious if anyone here knows

Ivory for Mastodon also has it, and I’m assuming it came from their Twitter client (never used it myself though)

Did you try manually setting the TDP? In Civ VI I set it to 7W (default graphics) and it has helped quite a bit.