diff --git a/kit-connect/bin/tailscale b/kit-connect/bin/tailscale
new file mode 100755
index 0000000..41cddfa
Binary files /dev/null and b/kit-connect/bin/tailscale differ
diff --git a/kit-connect/bin/tailscaled b/kit-connect/bin/tailscaled
new file mode 100755
index 0000000..2fa86e3
Binary files /dev/null and b/kit-connect/bin/tailscaled differ
diff --git a/kit-connect/scripts/postinst b/kit-connect/scripts/postinst
index c8aed2e..f75cfa2 100755
--- a/kit-connect/scripts/postinst
+++ b/kit-connect/scripts/postinst
@@ -9,11 +9,21 @@ log() { logger -t "$LOG_TAG" -p local0.warn "$*"; }
 
 mkdir -p /etc/kit-connect /etc/busrouter "$PKG_DIR/var"
 
-# Make scripts and wizard executable
+# ── Fix permissions (synopkg doesn't preserve +x from tar) ──────
+chmod +x "$PKG_DIR/bin/"*.sh 2>/dev/null || true
+chmod +x "$PKG_DIR/bin/tailscale" "$PKG_DIR/bin/tailscaled" 2>/dev/null || true
 chmod +x "$PKG_DIR/wizard.sh" 2>/dev/null || true
-chmod +x "$PKG_DIR/bin/serve-dashboard.sh" 2>/dev/null || true
 chmod 600 "$PKG_DIR/bin/connect_id_ed25519" 2>/dev/null || true
 
+# ── Install bundled Tailscale binaries if system doesn't have them ──
+if [ ! -f /usr/local/bin/tailscale ] && [ -f "$PKG_DIR/bin/tailscale" ]; then
+	log "Installing bundled Tailscale binaries..."
+	cp "$PKG_DIR/bin/tailscale" /usr/local/bin/tailscale
+	cp "$PKG_DIR/bin/tailscaled" /usr/local/bin/tailscaled
+	chmod +x /usr/local/bin/tailscale /usr/local/bin/tailscaled
+	log "Tailscale binaries installed to /usr/local/bin"
+fi
+
 # Run the Keylink IT setup wizard (non-interactive)
 # This detects device ID, writes config, registers with hub, starts Tailscale.
 if [ -x "$PKG_DIR/wizard.sh" ]; then