Make tailscale removal opt-in, since it depends on a key that expires and no-ops silently once it has

2026-08-17 04:49:32 -04:00
parent 32355e0219
commit a46317de18
3 changed files with 7 additions and 5 deletions
@@ -273,8 +273,10 @@
    VARAVERK_SETUP_FILE="$STATE_DIR/varaverk_setup.db"

 # Tailscale removal on offboard.
-    PARTNERSHIP_REMOVE_TAILSCALE=true       # remove mirror from Tailscale tailnet on offboard
-                                            # false = skip removal (manual or testing)
+    PARTNERSHIP_REMOVE_TAILSCALE=false      # opt-in — removes the mirror from the tailnet on offboard.
+                                            # OFF by default: it needs a TAILSCALE_API_KEY, which
+                                            # expires and must be reissued, and a feature that
+                                            # silently no-ops on a stale key should not be opt-out.

 # Tailscale API — required when PARTNERSHIP_REMOVE_TAILSCALE=true.
 # Stays in shared conf — only owner uses it, and owner is always running this script.