diff --git a/home/features/coding/opencode.nix b/home/features/coding/opencode.nix
index 4f3da5d..01ff09b 100644
--- a/home/features/coding/opencode.nix
+++ b/home/features/coding/opencode.nix
@@ -22,7 +22,7 @@
     enable = true;
     settings = {
       theme = "opencode";
-      plugin = ["oh-my-opencode" "opencode-antigravity-auth@beta"];
+      plugin = ["oh-my-opencode" "opencode-antigravity-auth@beta" "opencode-memory"];
       agent =
         builtins.fromJSON
         (builtins.readFile "${inputs.agents}/agents/agents.json");
diff --git a/hosts/m3-atlas/services/headscale.nix b/hosts/m3-atlas/services/headscale.nix
index 588a30e..c777103 100644
--- a/hosts/m3-atlas/services/headscale.nix
+++ b/hosts/m3-atlas/services/headscale.nix
@@ -8,7 +8,7 @@
   options.services.headscale = {
     adminUser = lib.mkOption {
       type = lib.types.str;
-      default = "m3tam3re";
+      default = "m3tam3re@m3ta.loc";
       description = "Username for the headscale admin user";
     };
   };
@@ -36,21 +36,6 @@
           dst = ["${adminUser}:*"];
         }
       ];
-      # Tailscale SSH rules
-      ssh = [
-        {
-          action = "accept";
-          src = ["${adminUser}"];
-          dst = ["*"];
-          users = ["*"];
-        }
-        {
-          action = "accept";
-          src = ["group:admins"];
-          dst = ["*"];
-          users = ["*"];
-        }
-      ];
       # Auto-approvers section for routes
       autoApprovers = {
         routes = {
@@ -74,7 +59,7 @@
     services = {
       headscale = {
         enable = true;
-        adminUser = "m3tam3re";
+        adminUser = "m3tam3re@m3ta.loc";
         port = 3009;
         settings = {
           server_url = "https://va.m3tam3re.com";
diff --git a/hosts/m3-atlas/services/tailscale.nix b/hosts/m3-atlas/services/tailscale.nix
index 6bb38e1..6c32316 100644
--- a/hosts/m3-atlas/services/tailscale.nix
+++ b/hosts/m3-atlas/services/tailscale.nix
@@ -12,7 +12,7 @@
       "--login-server=${config.services.headscale.settings.server_url}"
       "--advertise-exit-node"
       "--accept-routes"
-      "--ssh"
+      "--ssh=true"
     ];
   };
   services.networkd-dispatcher = lib.mkIf config.services.tailscale.enable {