Tailscale died while you’re traveling

Hotel Wi‑Fi. Phone on cell. Home box won’t answer. From here it all feels the same, and you can’t walk into the shop to poke it.

Break-glass while traveling: neighbor keys, smart plug, second node, one-pager, and try-first order

I’ve been that person. The fix was never “reinstall Tailscale from the lobby.” It was knowing what still works when the mesh looks dead, and who can touch the box.

Same hotel feeling, three different problems

Before you rebuild anything, sort the failure. Same three cases as when the box goes dark:

Dead hardware: power, SD, wedged OS. Nothing local answers.
Flaky path: box fine; shop Wi‑Fi or ISP isn’t.
Tailscale auth dead: machine fine on site; remote nothing until someone signs it back in.

Hotel Wi‑Fi can’t tell those apart. Your break-glass plan can.

What still works when you’re not there

Neighbor / keys. Who has a key or code? Who can sit in front of the box? Write the name before you leave town, not in the panic thread.
Smart plug (if you already trust it). Remote power cycle can clear a wedged OS. It does not fix expired Tailscale auth by itself. After power comes back, someone may still need to sign in once, or you already set unattended after reboot.
Second node. Another always-on device on the same LAN (spare Pi, shop PC #2) already on Tailscale. If the primary is dark but the second node answers, you still have a foothold, and often a path to see whether the site internet is alive.
One-pager. Who / where / what to try first. Pointers to where secrets live (password manager), not passwords on a sticky photo. This is the pack’s break-glass chapter in plain clothes.

Try this order first

Power / local life. Can someone on site see lights, a local screen, a keyboard login?
Whole-site internet. Do phones on the shop Wi‑Fi fail too? Fix the path before you blame Tailscale.
Healthchecks shout? Did the dead-man email fire? That means the box stopped checking in, not that Tailscale or a camera app is healthy (email when the box dies).
Tailscale admin. Node online? Need re-auth? Disabled?
Walk or send someone. No power / no local life / remote + local both fail and it matters today → keys + on-site bag. Cap how many minutes you burn remote before you call that.

Stop guessing. Write what you observed. Placeholders only: your site name, your box hostname, your people.

What this is not

Not opening a WAN port “just until I get home”
Not Ring / cloud cams as the always-on box (wrong target)
Not me on-call at 2 a.m. from Edmond
Not pasting Tailscale auth keys into a group text

Access Pack ($99)

Same break-glass one-pager in the Access Pack: who has keys, what to try first, where secrets live, plus Tailscale always-on, reach path without WAN forwards, Healthchecks email + prove-it unplug.

Access Pack ($99)

ZIP. Your accounts. Not a managed service. Not 24/7. Tailscale stays yours.

Stephen · shoutfire.com