diff --git a/zoraxy/CHANGELOG.md b/zoraxy/CHANGELOG.md
index e2b87aedbc..94db31cdd6 100644
--- a/zoraxy/CHANGELOG.md
+++ b/zoraxy/CHANGELOG.md
@@ -3,4 +3,5 @@
 - Zoraxy reverse proxy with web management UI (port 8000) for Home Assistant
 - Persistent configuration stored in the add-on config directory (/config)
 - Options exposed: NOAUTH, ZEROTIER, FASTGEOIP, MDNS, plus env_vars passthrough
+- ZeroTier mode supported via the NET_ADMIN capability and /dev/net/tun device
 - Based on upstream tobychui/zoraxy (https://github.com/tobychui/zoraxy/releases)
diff --git a/zoraxy/README.md b/zoraxy/README.md
index 44669826ab..a0e30b9b33 100644
--- a/zoraxy/README.md
+++ b/zoraxy/README.md
@@ -57,7 +57,7 @@ container as `/config`), so they survive add-on updates and restarts.
 | Option      | Default | Description                                                                                  |
 | ----------- | ------- | -------------------------------------------------------------------------------------------- |
 | `NOAUTH`    | `false` | Disable authentication for the management interface (use with care).                          |
-| `ZEROTIER`  | `false` | Enable the ZeroTier global area network controller (requires extra host capabilities).        |
+| `ZEROTIER`  | `false` | Enable the ZeroTier global area network controller (uses the `NET_ADMIN` capability and `/dev/net/tun`, both granted by the add-on). |
 | `FASTGEOIP` | `false` | Enable high-speed GeoIP lookup (uses ~1 GB extra memory).                                      |
 | `MDNS`      | `true`  | Enable mDNS service discovery.                                                                 |
 | `TZ`        | -       | Timezone, e.g. `Europe/Brussels`.                                                             |
diff --git a/zoraxy/config.yaml b/zoraxy/config.yaml
index 37f13212cf..9074aa5959 100644
--- a/zoraxy/config.yaml
+++ b/zoraxy/config.yaml
@@ -23,6 +23,10 @@ map:
   - addon_config:rw
   - share:rw
   - ssl
+privileged:
+  - NET_ADMIN
+devices:
+  - /dev/net/tun
 environment:
   PORT: "8000"
   DOCKER: "true"
diff --git a/zoraxy/updater.json b/zoraxy/updater.json
index 2cac259bcf..c47f9278fa 100644
--- a/zoraxy/updater.json
+++ b/zoraxy/updater.json
@@ -1,6 +1,6 @@
 {
   "last_update": "2026-06-19",
-  "paused": "false",
+  "paused": false,
   "repository": "alexbelgium/hassio-addons",
   "slug": "zoraxy",
   "source": "github",