- Add --accept-routes flag to tailscale up for subnet routing
- Schedule SSH lockdown via 'at' to avoid cutting access during setup
- SSH will only be accessible via Tailscale interface after 2 minutes
- Remove --ssh flag from tailscale up
- Remove temporary SSH port 22 opening (not needed anymore)
- SSH now uses standard auth via Tailscale network
- CI can connect without Tailscale SSH check prompts
- Remove Transmission deployment (now via Gitea Actions)
- Add git clone for repo structure
- Simplify to server preparation only
- Keep NFS mount configuration
- Update MOTD for new architecture
- Add get_tailscale_hostname() function with error handling
- Use sed instead of grep -o for better compatibility
- Add fallback to hostname.ts.net if detection fails
- Fix MOTD to use dynamic hostname detection
- Prevent script exit on empty grep result with pipefail
- Switch from deprecated .list format to .sources (DEB822)
- Use .asc key format instead of gpg --dearmor
- Use apt-get instead of apt for scripts (avoid CLI warning)
- Fix compatibility with Debian Trixie (testing)
- Change port binding from Tailscale IP to 127.0.0.1:9091
- Add tailscale serve to expose WebUI via HTTPS on tailnet
- Update MOTD and final message to reflect new access method
