You can setup a Tailscale traffic relay node which allows you to access any services within the defined subnets.

https://tailscale.com/kb/1019/subnets/

So that way you can query that database directly and not using any SSH tunnels.