Enable Tailscale SSH

Note

You will need to set up the remote machine to be accessed via SSH prior to going through these steps. The steps to enable SSH access can be found here.

The steps below are for enabling quick SSH access to a machine on your Tailnet without the need to manually copy SSH keys from one machine to another.

Configure and install Tailscale on the machine as you normally would/already have based on the host OS.
Run the following command:
```
tailscale set --ssh
```
If you are currently connected to the machine via Tailscale, you will be prompted to add the --accept-risk=lose-ssh flag to the command in order for it to be successful.
```
tailscale set --ssh --accept-risk=lose-ssh
```
If you lose SSH, simply re-initiate the connection ssh admin@machine and it should not prompt for a password.

If you are prompted to authenticate via a Tailscale URL in your browser and you do NOT want to do this every time, in the Tailscale Admin Console you will need to click the Access Control tab and edit the text configuration to update from "action": "check", to "action": "accept", and comment out the line that dictates how often to check:

// Define users and devices that can use Tailscale SSH.
"ssh": [
    // Allow all users to SSH into their own devices in check mode.
    // Comment this section out if you want to define specific restrictions.
    {
        "action": "accept",
        "src":    ["autogroup:member"],
        "dst":    ["autogroup:self"],
        "users":  ["autogroup:nonroot", "root"],
        // "checkPeriod": "12h",
    },
],

If you did not lose SSH, close and re-connect using the Tailscale DNS name or IP address and it should not prompt for a password.