4. VPS: Optional — Tailscale SSH as Backup

Status: ⚪ Optional

What: Enable Tailscale SSH as a fallback SSH mechanism that works even if the server’s sshd is misconfigured.

Why: Gives you a second, independent SSH path disconnected from the public internet. Already accessible via ssh root@100.121.185.70, and Tailscale SSH would keep working even if sshd config is broken.

How: tailscale up --ssh on the VPS, then tailscale ssh root@relik-vps from any tailnet device.