VPS

Read-only access pattern used from Mac:

ssh -F /dev/null -i ~/.ssh/relik-pi4 \
  -o BatchMode=yes \
  -o IdentitiesOnly=yes \
  -o PreferredAuthentications=publickey \
  -o PasswordAuthentication=no \
  -o KbdInteractiveAuthentication=no \
  -o StrictHostKeyChecking=accept-new \
  root@100.121.185.70

Do not mutate VPS packages, firewall, Tailscale, Cloudflare tunnel, DNS, services, users, keys, Nginx, or reboot state without explicit MJF deployment authorization.