nix-configs

commit 4007e6d57ae3ccc96827a9cb95c63b2ec98e787e
parent 36837b58307bd38a06aa867e37800a93f7a024a8
Author: breadcat <breadcat@users.noreply.github.com>
Date:   Wed,  3 Jun 2026 15:05:20 +0100

Add zerotier VPN setup

Diffstat:
A
common/zerotier.nix
 | 
10
++++++++++
M
machines/artemis.nix
 | 
1
+
M
machines/ilias.nix
 | 
1
+
M
machines/minerva.nix
 | 
1
+
M
variables.sample.nix
 | 
1
+

5 files changed, 14 insertions(+), 0 deletions(-)
diff --git a/common/zerotier.nix b/common/zerotier.nix
@@ -0,0 +1,10 @@
+{ vars, ... }:
+
+{
+  services.zerotierone = {
+    enable = true;
+    joinNetworks = [ "${vars.secrets.zerotier}" ];
+  };
+
+  networking.firewall.trustedInterfaces = [ "zt+" ];
+}
diff --git a/machines/artemis.nix b/machines/artemis.nix
@@ -19,6 +19,7 @@ let machine = "artemis"; in {
     ../common/syncthing.nix
     ../common/user.nix
     ../common/vnstat.nix
+    ../common/zerotier.nix
     ../scripts/blog-duolingo.nix
     ../scripts/blog-status.nix
     ../scripts/magnets.nix
diff --git a/machines/ilias.nix b/machines/ilias.nix
@@ -24,6 +24,7 @@ let machine = "ilias"; in {
     ../common/ssh-tunnel.nix
     ../common/syncthing.nix
     ../common/user.nix
+    ../common/zerotier.nix
     ../scripts/audiobook-cleaner.nix
     ../scripts/backup-local.nix
     ../scripts/blog-music.nix
diff --git a/machines/minerva.nix b/machines/minerva.nix
@@ -24,6 +24,7 @@ let machine = "minerva"; in {
     ../common/syncthing.nix
     ../common/user.nix
     ../common/ydotool.nix
+    ../common/zerotier.nix
     ../scripts/ctimerename.nix
     ../scripts/duupmove.nix
     ../scripts/restic.nix
diff --git a/variables.sample.nix b/variables.sample.nix
@@ -19,6 +19,7 @@ rec {
     todosecret = "";
     pdfpassword = "";
     privatekey = "path/to/private.key";
+    zerotier = "";
     };
   matrix = {
     user = "@user:domain.com";