Add-WindowsCapability -Online -Name OpenSSH.Server~~~~0.0.1.0; Set-Service sshd -StartupType Automatic; Start-Service sshd; Get-NetFirewallRule -Name 'OpenSSH-Server-In-TCP' -ErrorAction SilentlyContinue | Disable-NetFirewallRule; New-NetFirewallRule -Name 'PodoAI-SSH-Tailnet' -DisplayName 'PodoAI SSH tailnet only' -Direction Inbound -Protocol TCP -LocalPort 22 -RemoteAddress 100.64.0.0/10 -Action Allow -Profile Any; New-NetFirewallRule -Name 'PodoAI-ICMP-Tailnet' -DisplayName 'PodoAI ping tailnet only' -Direction Inbound -Protocol ICMPv4 -IcmpType 8 -RemoteAddress 100.64.0.0/10 -Action Allow -Profile Any; $k='C:\ProgramData\ssh\administrators_authorized_keys'; Add-Content -Path $k -Value 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGuo2SMZMgfBmG9klbsGex4HwOQy7vp2QOiPjq8RsjjC podoai-ops'; icacls.exe $k /inheritance:r /grant 'Administrators:F' /grant 'SYSTEM:F'; Restart-Service sshd; Get-Service sshd; hostname; whoami; Restart-Service Tailscale -ErrorAction SilentlyContinue; Start-Sleep 10; & 'C:\Program Files\Tailscale\tailscale.exe' status