Update OPNsense to latest version by going into the default menu via console or SSH and selecting 12 (you might need to do this couple of times to get to the final version)
Additionally, you need to enable Swap
Follow the tutorial: WireGuard mesh network using OPNsense. You can use the following command to set it up in one step (adjust IP range to your exposed IP range):opnsense-code ports && cd /usr/ports/security/tailscale && make install clean && service tailscaled enable && service tailscaled start && tailscale up --advertise-routes=172.16.103.1/24