- SSH config: replace REPLACE_WITH_CC_CI_HETZNER_TAILNET_IP placeholder with the real tailnet IP 100.95.31.88 (so a fresh re-provision is correct). - nix/configuration.nix + nix/README.md: mark HISTORICAL/dead (old Incus VM, superseded by the Hetzner host) to prevent a wrong-host deploy. - nginx oc.commoninternet.net vhost: note it's PARKED alongside opencode-web (kept for one-step re-enable, not deleted). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>