From c2e4b5ce342e95778c2cadb7e6c39385eefd4064 Mon Sep 17 00:00:00 2001
From: Devin Finlinson <devin.finlinson@pm.me>
Date: Wed, 22 Apr 2026 17:01:31 -0600
Subject: don't block tailnet ssh

---
 machines/biski/default.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/machines/biski/default.nix b/machines/biski/default.nix
index 383c958..8891eae 100644
--- a/machines/biski/default.nix
+++ b/machines/biski/default.nix
@@ -80,6 +80,7 @@
       # Whitelist some subnets
       "205.192.218.182/29"
       "10.0.0.0/8"
+      "100.64.0.0/10" # from tailscale
     ];
     jails = {
       routeros-rsyslog-sshd.settings = {
-- 
cgit v1.2.3