clan-infra/modules/zerotier/default.nix

32 lines
744 B
Nix

{ lib, ... }:
{
networking.firewall.allowedTCPPorts = [ 9993 ];
networking.firewall.allowedUDPPorts = [ 9993 ];
networking.firewall.interfaces."zt+".allowedTCPPorts = [ 5353 ];
networking.firewall.interfaces."zt+".allowedUDPPorts = [ 5353 ];
# Note avahi was super slow. systemd-resolved worked much faster for mdns
systemd.network.networks = {
zerotier.extraConfig = ''
[Match]
Name=zt*
[Network]
LLMNR=true
LLDP=true
MulticastDNS=true
KeepConfiguration=static
'';
};
services.zerotierone = {
enable = true;
joinNetworks = [
"33d87fa6bd93423e"
];
};
nixpkgs.config.allowUnfreePredicate = pkg: builtins.elem (lib.getName pkg) [
"zerotierone"
];
}