From e89f384c244d6fc88d6fb75034497968dee84804 Mon Sep 17 00:00:00 2001
From: autonomic-bot <autonomic-bot@git.autonomic.zone>
Date: Sun, 31 May 2026 03:02:04 +0000
Subject: [PATCH] nix: remove --ssh flag from tailscale (use normal key auth,
 not tailscale ACL)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 nix/hosts/cc-ci-orchestrator-hetzner/configuration.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nix/hosts/cc-ci-orchestrator-hetzner/configuration.nix b/nix/hosts/cc-ci-orchestrator-hetzner/configuration.nix
index 5ca2b8a..b449155 100644
--- a/nix/hosts/cc-ci-orchestrator-hetzner/configuration.nix
+++ b/nix/hosts/cc-ci-orchestrator-hetzner/configuration.nix
@@ -34,7 +34,7 @@
   services.tailscale = {
     enable = true;
     authKeyFile = "/etc/ts-auth-key";
-    extraUpFlags = [ "--hostname=cc-ci-orchestrator" "--ssh" ];
+    extraUpFlags = [ "--hostname=cc-ci-orchestrator" ];
   };
 
   # 4 GB disk swap — claude session memory safety net (2 GB RAM is tight for 3+ sessions).