SSH Machines

Use SSH host aliases; do not hard-code addresses:

• macbook — current MacBook over Tailscale
• macbook-lan — current MacBook on the local network
• macmini — Mac mini over Tailscale
• macmini-lan — Mac mini on the local network
• homelab — Linux homelab over Tailscale
• homelab-lan — Linux homelab on the local network
• omarchy — Omarchy Linux machine over Tailscale
• omarchy-lan — Omarchy Linux machine on the local network

Workflow

1. Confirm the target with ssh <name> 'hostname'.
2. Run non-interactive commands with ssh <name> '<command>'.
3. For file transfer, use scp or stream through SSH.
4. Report which host changed and the verification result.

Use the default aliases for Tailscale access. Use a -lan alias for local-network access or to troubleshoot Tailscale. Quote remote commands so local shell expansion cannot alter them.

Macbook, macmini, and homelab intentionally share ~/.ssh/homelab; omarchy only authorizes its public key. Never copy this private key elsewhere, print it, or put it in a prompt/log. The phone must remain password-only: never disable SSH password authentication or modify sshd authentication settings unless explicitly asked.

Shared aliases live in ~/.ssh/machines.conf. Keep that file identical on macbook, macmini, and homelab when machine addresses change. Preserve each machine's main ~/.ssh/config; it contains machine-specific entries.