ssh over tailscale

[octvs]

I got ssh working via the wiki entry. So if I can do now

ssh nix-on-droid@PHONE_IP -p 8022

I assigned a static IP on my home router for ease but what would be better to
use the tailscale since the device is on my tailnet, however when I do ssh
hangs forever.

$ ssh nix-on-droid@DEVICE -p 8022 -vvvvvv
debug1: OpenSSH_10.0p2, OpenSSL 3.4.1 11 Feb 2025
debug3: Running on Linux 6.12.29 #1-NixOS SMP PREEMPT_DYNAMIC Sun May 18 06:25:00 UTC 2025 x86_64
debug3: Started with: ssh nix-on-droid@DEVICE -p 8022 -vvvvvv
debug1: Reading configuration data /HOME/.ssh/config
debug1: /HOME/.ssh/config line 6: Applying options for *
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 5: Applying options for *
debug3: /etc/ssh/ssh_config line 7: Including file /nix/store/if9z6wmzmb07j63c02mvfkhn1mw1w5p4-systemd-257.5/lib/systemd/ssh_config.d/20-systemd-ssh-proxy.conf depth 0
debug1: Reading configuration data /nix/store/if9z6wmzmb07j63c02mvfkhn1mw1w5p4-systemd-257.5/lib/systemd/ssh_config.d/20-systemd-ssh-proxy.conf
debug3: expanded UserKnownHostsFile '~/.ssh/known_hosts' -> '/HOME/.ssh/known_hosts'
debug1: Control socket "/HOME/.ssh/master-nix-on-droid@DEVICE:8022" does not exist
debug2: resolving "DEVICE" port 8022
debug3: resolve_host: lookup DEVICE:8022
debug3: channel_clear_timeouts: clearing
debug3: ssh_connect_direct: entering
debug1: Connecting to DEVICE [DEVICE_TAILNET_IP] port 8022.
debug3: set_sock_tos: set socket 3 IP_TOS 0x48

I can ping the device

$ ping DEVICE                        
PING DEVICE.TAILNET.ts.net (DEVICE_TAILNET_IP) 56(84) bytes of data.
64 bytes from DEVICE.TAILNET.ts.net (DEVICE_TAILNET_IP): icmp_seq=1 ttl=64 time=184 ms

What might be the reason ssh is not working over tailnet? Is it #2?