fix(seedbox): disable Tailscale SSH management for CI compatibility
All checks were successful
Deploy Seedbox / Deploy Seedbox Stacks (push) Successful in 1m0s

- Remove --ssh flag from tailscale up
- Remove temporary SSH port 22 opening (not needed anymore)
- SSH now uses standard auth via Tailscale network
- CI can connect without Tailscale SSH check prompts
This commit is contained in:
2026-01-04 15:58:55 +00:00
parent c7155d0555
commit 7ccfa58dc1

View File

@@ -80,8 +80,8 @@ main() {
log_info "Installing Tailscale..."
curl -fsSL https://tailscale.com/install.sh | sh
log_info "Connecting to Tailscale (SSH only)..."
sudo tailscale up --ssh
log_info "Connecting to Tailscale (without SSH management)..."
sudo tailscale up
# Get Tailscale hostname for display
TS_FQDN=$(tailscale status --json 2>/dev/null | awk -F'"' '
@@ -125,19 +125,10 @@ EOF
# BitTorrent peer port (public)
sudo ufw allow 51413/tcp > /dev/null
sudo ufw allow 51413/udp > /dev/null
# Allow all traffic on Tailscale interface
# Allow all traffic on Tailscale interface (including SSH)
sudo ufw allow in on tailscale0 > /dev/null
# Temporary SSH access (safety net)
sudo ufw allow 22/tcp > /dev/null
sudo ufw --force enable > /dev/null
# Schedule SSH rule removal in 5 minutes
log_warn "SSH port 22 temporarily open for 5 minutes (safety net)."
echo "sudo ufw delete allow 22/tcp && logger 'UFW: SSH port 22 closed'" | sudo at now + 5 minutes 2>/dev/null || {
log_warn "Could not schedule automatic SSH cleanup. Run manually:"
log_warn " sudo ufw delete allow 22/tcp"
}
# Step 8: Create directory structure
log_info "Creating directory structure..."
sudo mkdir -p "$SEEDBOX_DIR"
@@ -222,7 +213,7 @@ MOTD
log_info "=========================================="
echo ""
echo "Server accessible at:"
echo " SSH: ${TS_FQDN}"
echo " SSH: ssh user@${TS_FQDN}"
echo ""
echo "Directory structure:"
echo " ${SEEDBOX_DIR}/"
@@ -245,8 +236,7 @@ MOTD
echo " 2. Push to main branch to trigger deployment"
echo " 3. Services will be available at <service>.taila5ad8.ts.net"
echo ""
log_warn "SSH port 22 will be closed in 5 minutes."
log_warn "Use Tailscale SSH: ssh ${TS_FQDN}"
log_info "SSH access via Tailscale: ssh user@${TS_FQDN}"
echo ""
}