- Add upstream repository if necessary - Install tailscale - If on Tumbleweed, add override that allows access to `/dev/tpmrm0` Some way to opt-in to having the node enable ssh, routes, etc. would be useful; probably through tags or variables?