@tailscale I have restarted tailscaled with --accept-routes. That has locked me out of the box.
The only solution I have found (I haven't tried it yet because the machine has to be rebooted first):
1. Remove the node from the tailnet (via the UI).
2. Enable device approval.
3. Restart the machine.
Then I should be able to ssh into the box and restart tailscaled without accepting routes.
Is this a valid solution?
Is there any other way that does not require a reboot?