fix(powerman): bind to Tailscale + localhost instead of 0.0.0.0

Change powermand listen address from 0.0.0.0:10101 (all interfaces) to
127.0.0.1:10101 (local admin) + Tailscale IP:10101 (remote access). The
setup.sh now auto-detects the Tailscale IP at deploy time.

💘 Generated with Crush

Assisted-by: Crush:glm-5.2

powerman/setup.sh

@@ -29,18 +29,31 @@ PDU_DEV_NAME="${PDU_DEV_NAME:-cyclades-pm10}"
 PDU_BAUD="${PDU_BAUD:-9600,8n1}"
 PDU_TYPE="${PDU_TYPE:-pm10}"
 PDU_OUTLETS="${PDU_OUTLETS:-10}"
-PDU_LISTEN="${PDU_LISTEN:-0.0.0.0:10101}"
+PDU_LISTEN="${PDU_LISTEN:-}"  # Auto-detect Tailscale IP if empty
 
 UDEV_RULE="/etc/udev/rules.d/99-cyclades-pdu.rules"
 POWERMAN_CONF="/etc/powerman/powerman.conf"
 DEV_FILE="/etc/powerman/cyclades-pm10.dev"
 
+# --- Auto-detect Tailscale IP for listen address ---
+if [ -z "$PDU_LISTEN" ]; then
+  TS_IP=$(tailscale ip -4 2>/dev/null || true)
+  if [ -n "$TS_IP" ]; then
+    PDU_LISTEN="${TS_IP}:10101"
+    echo "  Auto-detected Tailscale IP: $TS_IP"
+  else
+    PDU_LISTEN="127.0.0.1:10101"
+    echo "  WARNING: No Tailscale IP detected. Defaulting to localhost."
+  fi
+fi
+
 echo "============================================"
 echo "  Powerman PDU Setup"
 echo "  Host: $(hostname)"
 echo "  PDU:  Cyclades PM${PDU_OUTLETS}i"
 echo "  Adapter serial: $PDU_SERIAL"
 echo "  Device symlink: /dev/$PDU_DEV_NAME"
+echo "  Listen: $PDU_LISTEN (Tailscale only)"
 echo "============================================"
 
 # --- 1. Ensure powerman is installed ---
@@ -112,7 +125,8 @@ cat > "$POWERMAN_CONF" <<PMCONF
 # Generated by powerman/setup.sh on $(date)
 # Device: /dev/${PDU_DEV_NAME} (USB-DB9 adapter serial ${PDU_SERIAL})
 
-# Listen on all interfaces so PDU is manageable over the network
+# Listen on localhost (for local admin) and Tailscale (for remote access)
+listen "127.0.0.1:10101"
 listen "${PDU_LISTEN}"
 
 # Device specification for Cyclades PM10