# Tailscale Network

All Clawdie hosts communicate over Tailscale with zero public exposure.

| Host    | Tailscale IP   | OS         | Role                                   |
| ------- | -------------- | ---------- | -------------------------------------- |
| debby   | ${DEBBY_TS_IP}  | Debian 13  | Hermes secondary + soul backup (intermittent laptop) |
| domedog | ${DOMEDOG_TS_IP} | Linux      | Claude agent, secondary builder        |
| osa     | ${OSA_TS_IP}  | FreeBSD 15 | Always-on VPS: orchestrator + colibri board (hermes-osa) |

SSH between hosts uses Tailscale IPs, never public IPs. Each host has its own SSH key. No key sharing between hosts. Config in `~/.ssh/config` with `HostName` pointing to Tailscale IPs and `IdentitiesOnly yes`.