Okay I should've looked a little more before starting on this misadventure, the issue was only with Tailscale SSH and is fixed in nixpkgs master github.com/NixOS/nixpkgs/pull/