Home / infra/tailnet.md

Tailnet

Sources: /workspace/tailscale/PLAN.md, /workspace/tailscale/LOCAL-AI.md, /workspace/audits/audit-2026-10-15.md. Addresses and auth material are left out on purpose. See those files.

Members

Mac mini, MacBook Pro, the Neo, NAS, and the AMD dev PC (tailnet hostname omarchy-ai; see infra/omarchy.md for its spec — not copied here). The box joins as tag grokbox with userspace networking.

Access rules (ACL)

grokbox -> Mac mini: TCP 22 and 443.
grokbox -> MacBook Pro, Neo: TCP 22 only.
NAS: no box access.
Nothing may connect to grokbox.

How the box connects

Userspace tailscaled with a SOCKS5 proxy on localhost:1055.
SSH via /workspace/tailscale/tssh <mini|mbp|neo> (paramiko). SSH key location: see LOCAL-AI.md.

Status (2026-10-16)

The box is back on the tailnet (userspace). Atlas verified SSH read/write/run to the mini, MBP and Neo.
tssh to the mini worked at ~12:19 and ~12:28 AM CT (docs sync). At 06:05 CT the box showed offline after a network link change and tssh failed; sync queued.
oMLX through the proxy from the box: unverified.
The old public Funnel on port 8765 is gone. Mini serving is tailnet-only.

History

2026-10-14 20:56 CT: box went NeedsLogin after a reboot. Back on the tailnet by 2026-10-16 (Atlas report t184).