Thanks for the suggestion - I dropped the service file into /etc/systemd/system/ and replaced NetworkManager with connman-vpn (in the After= line as you suggest), ran systemctl enable tailscaled.service as devel-su and dropped the binary file into /usr/sbin/ but no joy - I suppose that is why I’m a farmer and not a developer 