If all nodes are connected through ethernet to each other (or at least one common node) you could go for OpenWRT’s ‘Dumb AP’ setup as well

Edit: Already mentioned here; https://feditown.com/comment/1980836

Maintainer has been absent for some time so kernel v6.11 and v6.12 isn’t supported OOTB, to get it to work with kernel v6.11 you need to pull the fix from: !48

If I remember correctly the default sudo timeout is set to 5 minutes on Yay, you should be able to increase it to something more reasonable