diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 84b9899..7f354dd 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -27,7 +27,7 @@ jobs:
       run: |
         set -euxo pipefail
         mkdir -p ~/.ssh
-        ssh-keyscan $MACHINE > ~/.ssh/known_hosts
+        ssh-keyscan $(tailscale ip -4 $MACHINE) > ~/.ssh/known_hosts
         printf "%s" "$SSH_KEY" > ~/.ssh/key
         chmod 600 ~/.ssh/key
 
@@ -46,7 +46,7 @@ jobs:
         FILENAME=prose-${TIME}.tar.gz
         mkdir -p static/css
         tar -czf $FILENAME prose fonts/ static/ styles/ templates/ posts/
-        echo $FILENAME "github@$MACHINE:/home/github/"
-        scp -i ~/.ssh/key $FILENAME "github@$MACHINE:/home/github/"
-        ssh -i ~/.ssh/key "github@$MACHINE" "tar -C /var/www/blog -xzf ~/$FILENAME"
-        ssh -i ~/.ssh/key "github@$MACHINE" "sudo systemctl restart prose"
+        echo $FILENAME "github@$(tailscale ip -4 $MACHINE):/home/github/"
+        scp -i ~/.ssh/key $FILENAME "github@$(tailscale ip -4 $MACHINE):/home/github/"
+        ssh -i ~/.ssh/key "github@$(tailscale ip -4 $MACHINE)" "tar -C /var/www/blog -xzf ~/$FILENAME"
+        ssh -i ~/.ssh/key "github@$(tailscale ip -4 $MACHINE)" "sudo systemctl restart prose"