--- type: client name: robert-wolkin display_name: Robert Wolkin last_compiled: 2026-06-06 compiled_by: GURU-5070/claude-main sources: - (stub — created 2026-06-06 during Tailscale planning; no session logs yet) backlinks: - patterns/tailscale-client-management --- # Robert Wolkin > **STUB** — created 2026-06-06 to track the Tailscale rollout. Most profile fields are > not yet captured; fill in from Syncro / first session log. Do not treat `[unverified]` > fields as fact. ## Profile - **Company type:** [unverified] - **Contract type:** [unverified] - **Key contacts:** Robert Wolkin — [contact details unverified] - **Environment:** Very small office, non-technical users (enroll/manage everything for them; no self-service login expected). GuruRMM shows 3 Windows 11 Home agents, but only **two are in the Tailscale scope: RSW-Laptop and front**. `DESKTOP-V1JT1SE` is Bob's personal machine and is intentionally **not** part of the Tailscale setup. - **Syncro customer ID:** [unverified] - **GuruRMM client name:** `Wolkin, Robert` (Last, First) — note the form differs from this article's display name. ## Infrastructure ### Tailscale (active rollout) Per [[patterns/tailscale-client-management]] — **dedicated client-owned tailnet, ACG holds Admin**. **Goal: RSW-Laptop reaches `front` (the front-desk PC).** Only those two nodes are enrolled; Bob's personal `DESKTOP-V1JT1SE` is out of scope. | Field | Value | |---|---| | Tailnet identity (IdP / owner account) | [to fill — Robert's M365/Google or dedicated admin account] | | Plan | [to fill — free tier functional; Starter ~$6/user/mo for commercial footing] | | ACG admin identity (your seat) | [to fill] | | Device tag | `tag:wolkin` (suggested) | | MagicDNS | [enable] | | Auth key (reusable, pre-approved, tagged) | store in vault: `clients/robert-wolkin/tailscale-authkey.sops.yaml` | | Key rotation due | [to fill — ~90 days from issue] | | Scope | Hostname | Tailscale 100.x | Notes | |---|---|---|---| | **In scope** | RSW-Laptop | [after enroll] | Robert's laptop — connects out to `front` | | **In scope** | front | [after enroll] | Front-desk PC — the target the laptop reaches | | Out of scope | DESKTOP-V1JT1SE | — | Bob's personal machine; NOT enrolled in Tailscale | Enrollment: push [`patterns/tailscale-client-enroll.ps1`](../patterns/tailscale-client-enroll.ps1) from GuruRMM with the auth key as a masked parameter. ### Servers & Services / Email & Identity / Network Not yet documented. [unverified] ## GuruRMM - **Client name:** `Wolkin, Robert` - **Site name:** `Main` - **Site ID:** `2bb05f85-9fc8-4a7e-a5e5-ffe0c46431ac` - **Enrolled agents (3, all online as of 2026-06-06, Windows 11 Home 25H2 build 26200, agent v0.6.57):** | Hostname | Agent ID | Notes | |---|---|---| | DESKTOP-V1JT1SE | `30f6af79-ab19-4ed3-9ebc-71b2bffc2d27` | **Bob's personal machine — NOT in Tailscale scope** | | RSW-Laptop | `043fd673-35a2-4d3d-8f91-ed73ce70cc1e` | Robert's laptop — Tailscale node | | front | `877d311a-4b24-462c-97b1-d2a0f7730a71` | Front-desk PC — Tailscale node (laptop connects here) | - **Enrollment key:** [unverified — not located in vault during this pass; check `clients/robert-wolkin/` or regenerate] ## Access - **Vault path:** `clients/robert-wolkin/` (no entries yet) - **Syncro:** [unverified] ## Active Work - **Tailscale rollout (2026-06-06):** Stand up Robert's tailnet, assign ACG as Admin, set the `tag:wolkin` ACL + MagicDNS, generate a reusable/pre-approved tagged auth key, and enroll **RSW-Laptop + front** via the GuruRMM script (agent IDs above). Goal: RSW-Laptop reaches `front`. Do NOT enroll DESKTOP-V1JT1SE (Bob's personal machine). Runbook in [[patterns/tailscale-client-management]]. ## History Highlights | Date | Event | |---|---| | 2026-06-06 | Tailscale client management pattern + enroll script authored; this client stub created to track the rollout. | | 2026-06-06 | GuruRMM scan: client `Wolkin, Robert` / site `Main` has 3 online Windows 11 Home agents (DESKTOP-V1JT1SE, RSW-Laptop, front), agent v0.6.57. Discrepancy flagged: expected 2 machines, found 3. | ## Backlinks - [[patterns/tailscale-client-management]] — MSP Tailscale management pattern + enroll script