# VPS Access Map

**Last updated:** 2026-05-10

## The fleet (Tailscale tailnet)

| Host | Tailscale IP | SSH user | Key | Notes |
|---|---|---|---|---|
| VPS (hermes running here) | `100.116.48.82` | — | — | SSH locally, not remote |
| OpsMan (clawdbot) | `100.118.241.100` | root | `/root/.ssh/id_hermes_ed25519` | Linux, confirmed reachable |
| Laptop (Rocky's Windows) | `laptop-cd8df7fs` / `100.108.207.15` | `mclou` | `/root/.ssh/id_hermes_ed25519` | Windows OpenSSH = mclou Administrator, NOT root. `tailscale ssh` does NOT work on Windows — use plain SSH via hostname. |

## SSH command reference

**To laptop (Rocky's Windows):**
```bash
ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs "<command>"
```

**To OpsMan:**
```bash
ssh -i /root/.ssh/id_hermes_ed25519 root@opsman-01 "<command>"
```

**General Tailscale hostname SSH:**
```bash
ssh -i /root/.ssh/id_hermes_ed25519 <user>@<tailscale-hostname>
```

## Common mistakes to avoid

1. `tailscale ssh` — only works on Linux nodes with Tailscale SSH server. Does NOT work on Windows.
2. `ssh user@100.108.207.15` — fails if known_hosts has hostname entry only (use hostname, not IP).
3. `ssh root@laptop-cd8df7fs` — wrong user on Windows. Use `mclou`, not `root`.
4. SSH to VPS from VPS — SSH locally, not via tailnet.

## What's reachable from VPS

- ✅ OpsMan (clawdbot)
- ✅ Laptop (Rocky's Windows)
- ❌ Any other targets — add as needed