# The third door. Tailscale SSH is served by tailscaled itself on port 22 of the
# tailnet address, so no sshd config, drop-in or unit can take it down — it is the door
# that kept debian1 reachable when the sshd converge took debian2 and debian3 off the
# network, and it was on only because it had been switched on by hand.
#
# It lives in tailscaled's prefs, not in a file this repo installs, so re-registering a
# node silently drops it. That is why it is converged on a timer rather than once.
[Unit]
Description=Keep Tailscale SSH enabled on this node
After=tailscaled.service
Wants=tailscaled.service

[Service]
Type=oneshot
ExecStart=/usr/bin/tailscale set --ssh