Distillation

Date: Sep 17, 2026

• 🟡 (09:10) Existing /usr/local/bin/ts-opencode-watchdog.sh was confirmed as a 16-line /bin/sh script with SVC="svc:opencode" and TS=/usr/bin/tailscale; it parses "$TS" debug prefs using Python JSON, exits successfully when AdvertiseServices contains svc:opencode, and otherwise runs "$TS" serve advertise "$SVC" || exit 1. It has no AdvertiseRoutes or exit-node repair logic.
• 🟡 (09:10) Existing /etc/systemd/system/ts-opencode-advertise.timer was confirmed with Description=Periodically ensure Tailscale svc:opencode stays advertised, OnBootSec=30, OnUnitActiveSec=60, AccuracySec=10, and WantedBy=timers.target.
• 🟡 (09:10) Assistant provided a host-side privileged fix replacing /usr/local/bin/ts-opencode-watchdog.sh with a #!/bin/sh and set -eu script using TS=/usr/bin/tailscale, SVC=svc:opencode, and one captured PREFS=$("$TS" debug prefs). The script independently checks AdvertiseServices for svc:opencode and runs "$TS" serve advertise "$SVC" if absent; it also checks whether {'0.0.0.0/0', '::/0'} is a subset of AdvertiseRoutes and runs "$TS" set --advertise-exit-node if either route is absent. Installation command sets mode 0755.
• 🟡 (09:10) Assistant provided replacement systemd definitions: /etc/systemd/system/ts-opencode-advertise.service uses Description=Ensure required Tailscale advertisements remain enabled, After=tailscaled.service, Wants=tailscaled.service, Type=oneshot, and ExecStart=/usr/local/bin/ts-opencode-watchdog.sh; /etc/systemd/system/ts-opencode-advertise.timer uses Description=Periodically restore required Tailscale advertisements, OnBootSec=30, OnUnitActiveSec=60, AccuracySec=10, and WantedBy=timers.target.
• 🟡 (09:10) Assistant instructed running sudo systemctl daemon-reload, sudo systemctl restart ts-opencode-advertise.timer, and sudo systemctl start ts-opencode-advertise.service after writing the files, noting that no output from the final command indicates success. Execution and verification of the script, timer, routes, svc:opencode advertisement, and exit-node visibility remained pending because the assistant shell could not elevate with host sudo.