Yes, node keys rotate automatically every ~24 hours. This is seamless and requires no action.
1 year (8760 hours).
# Generate a key expiring in 72 hours tailscale auth-key --valid-for 72h tailscale auth-key --reusable --valid-for 2160h Generate a key expiring in 1 year (max) tailscale auth-key --reusable --valid-for 8760h tailscale key expiry