ZeroTier is a VPN service which is an easy option to connect remotely when neither port forwarding nor using Tor is possible (e.g. iOS on a remote network)
The drawback is that it requires installing a trusted package which gives access to your private network.
Other, less trusted methods to connect remotely:
- RTL access through HTTPS/SSL (needs port forwarding and a dynamicDNS)
https://github.com/openoms/bitcoin-tutorials/blob/master/nginx/README.md - Zeus access with a Tor auth cookie (needs an Android phone and Tor activated)
https://github.com/openoms/bitcoin-tutorials/blob/master/Zeus_to_RaspiBlitz_through_Tor.md - Setup port-forwarding with a SSH tunnel https://github.com/rootzoll/raspiblitz/blob/master/FAQ.md#how-to-setup-port-forwarding-with-a-ssh-tunnel
Steps to install:
-
Create a my.zerotier.com account and a network
-
Go to https://my.zerotier.com/login and register. Use a STRONG PASSWORD as anyone with your credentials will have access to your private network.
-
Click
Create a networkthen record yourNetwork ID. -
Install ZeroTier on the RaspiBlitz (more details on https://www.zerotier.com/download.shtml):
$ curl -s 'https://raw.githubusercontent.com/zerotier/download.zerotier.com/master/htdocs/contact%40zerotier.com.gpg' | gpg --import && \
if z=$(curl -s 'https://install.zerotier.com/' | gpg); then echo "$z" | sudo bash; fi
-
Then run:
$ sudo zerotier-cli join [the network ID you previously recorded] -
Install ZeroTier on your other devices: iOS, Android, Windows, Mac, Linux, etc. Use the same
network IDyou recorded before. -
Open https://my.zerotier.com
Networksmenu and accept the new devices pending approval. -
On the Raspiblitz modify the lnd.conf manually:
$ nano /home/admin/.lnd/lnd.conf
add the line:
tlsextraip=172.X
CTRL+O and ENTER to save, CTRL+X to exit -
Renew the TLS certificates either from the EXPORT menu or run:
./config.scripts/lnd.newtlscert.sh
After setting up and activating ZeroTier on my Android phone successfully tested:
- ZeusLN using the IP 172.x.x.x and port 8080
- RTL from the outside on my 172.x.x.x:3000 address
- Termius to connect with ssh to [email protected]
- To uninstall run:
sudo systemctl stop zerotier-one
sudo apt remove zerotier-one
sudo rm -r /var/lib/zerotier-one
This guide is based on: https://medium.com/@ketominer/using-nodl-remotely-with-zerotier-a9a17cbb48cf
Discussion: raspiblitz/raspiblitz#601