Messages

WORKAROUND

In your web UI, set the "Pre-authentication Key" to "file:/dev/null".  This effectively works the same as not specifying an auth key and achieves what I described in my previous comment.

ps: Also check this Github issue: https://github.com/opnsense/plugins/issues/4661#issuecomment-3186000984

My device stopped registering to my tailnet on July 27th.

Deleting the "--auth-key=tskey-auth-REDACTED" flag from "/etc/rc.conf.d/tailscaled" made it work again.  The node key is already part of the saved state which is why simply removing the auth-key flag to tailscale up from "/etc/rc.conf.d/tailscaled" works (and is the correct thing to do).  FYI, my node key never expires (I disabled the node key expiration for my opnsense node when I set up the tailscale plugin). 

QUESTION: How can I make this permanent the right way?  The web UI does not let me remove the auth-key.  It is a required field.