forked from
lass.pds.lassul.us/superconfig
This repository has no description
machines.barnacle: add git
author
lassulus
date
(Jun 4, 2025, 7:08 PM CEST)
commit
9a7a311e
9a7a311e9e2d2516ea5a212644618b36ada6f905
parent
1bea4abb
1bea4abba9b1d6dbafbc2967931ea400411f5dd4
+35
+34
test.md
+34
test.md
···
1
+
2
+
## Overview
3
+
4
+
This guide explains how to set up and manage a [ZeroTier VPN](https://zerotier.com) for a clan network. Each VPN requires a single controller and can support multiple peers and optional moons for better connectivity.
5
+
6
+
## Roles
7
+
8
+
### 1. Controller
9
+
10
+
The [Controller](https://docs.zerotier.com/controller/) manages network membership and is responsible for admitting new peers.
11
+
When a new node is added to the clan, the controller must be updated to ensure it has the latest member list.
12
+
13
+
- **Key Points:**
14
+
- Must be online to admit new machines to the VPN.
15
+
- Existing nodes can continue to communicate even when the controller is offline.
16
+
17
+
### 2. Moons
18
+
19
+
[Moons](https://docs.zerotier.com/roots) act as relay nodes,
20
+
providing direct connectivity to peers via their public IP addresses.
21
+
They enable devices that are not publicly reachable to join the VPN by routing through these nodes.
22
+
23
+
- **Configuration Notes:**
24
+
- Each moon must define its public IP address.
25
+
- Ensures connectivity for devices behind NAT or restrictive firewalls.
26
+
27
+
### 3. Peers
28
+
29
+
Peers are standard nodes in the VPN.
30
+
They connect to other peers, moons, and the controller as needed.
31
+
32
+
- **Purpose:**
33
+
- General role for all machines that are neither controllers nor moons.
34
+
- Ideal for most clan members' devices.