Three things I'd do differently if I started this build today

Three day-one actions that prevent recurring friction: make the box rejoin the tailnet after every restart, name the workload before picking a model, and wire the calendar while you are already in setup mode.