From 73239368993a1d4352ffebcca3d019008f1f9e72 Mon Sep 17 00:00:00 2001 From: Claude Date: Fri, 19 Jun 2026 20:02:55 +0000 Subject: [PATCH] Address PR review: ZeroTier permissions and updater.json paused boolean - Grant NET_ADMIN capability and /dev/net/tun device so the ZEROTIER option works at runtime (Codex review) - Use a JSON boolean for updater.json "paused" to match the documented format (CodeRabbit review) - Document the ZeroTier requirements in README and CHANGELOG Co-Authored-By: Claude Opus 4.8 Claude-Session: https://claude.ai/code/session_01PXZfzWxhkWHq8i8P7fnDvL --- zoraxy/CHANGELOG.md | 1 + zoraxy/README.md | 2 +- zoraxy/config.yaml | 4 ++++ zoraxy/updater.json | 2 +- 4 files changed, 7 insertions(+), 2 deletions(-) diff --git a/zoraxy/CHANGELOG.md b/zoraxy/CHANGELOG.md index e2b87aedbc..94db31cdd6 100644 --- a/zoraxy/CHANGELOG.md +++ b/zoraxy/CHANGELOG.md @@ -3,4 +3,5 @@ - Zoraxy reverse proxy with web management UI (port 8000) for Home Assistant - Persistent configuration stored in the add-on config directory (/config) - Options exposed: NOAUTH, ZEROTIER, FASTGEOIP, MDNS, plus env_vars passthrough +- ZeroTier mode supported via the NET_ADMIN capability and /dev/net/tun device - Based on upstream tobychui/zoraxy (https://github.com/tobychui/zoraxy/releases) diff --git a/zoraxy/README.md b/zoraxy/README.md index 44669826ab..a0e30b9b33 100644 --- a/zoraxy/README.md +++ b/zoraxy/README.md @@ -57,7 +57,7 @@ container as `/config`), so they survive add-on updates and restarts. | Option | Default | Description | | ----------- | ------- | -------------------------------------------------------------------------------------------- | | `NOAUTH` | `false` | Disable authentication for the management interface (use with care). | -| `ZEROTIER` | `false` | Enable the ZeroTier global area network controller (requires extra host capabilities). | +| `ZEROTIER` | `false` | Enable the ZeroTier global area network controller (uses the `NET_ADMIN` capability and `/dev/net/tun`, both granted by the add-on). | | `FASTGEOIP` | `false` | Enable high-speed GeoIP lookup (uses ~1 GB extra memory). | | `MDNS` | `true` | Enable mDNS service discovery. | | `TZ` | - | Timezone, e.g. `Europe/Brussels`. | diff --git a/zoraxy/config.yaml b/zoraxy/config.yaml index 37f13212cf..9074aa5959 100644 --- a/zoraxy/config.yaml +++ b/zoraxy/config.yaml @@ -23,6 +23,10 @@ map: - addon_config:rw - share:rw - ssl +privileged: + - NET_ADMIN +devices: + - /dev/net/tun environment: PORT: "8000" DOCKER: "true" diff --git a/zoraxy/updater.json b/zoraxy/updater.json index 2cac259bcf..c47f9278fa 100644 --- a/zoraxy/updater.json +++ b/zoraxy/updater.json @@ -1,6 +1,6 @@ { "last_update": "2026-06-19", - "paused": "false", + "paused": false, "repository": "alexbelgium/hassio-addons", "slug": "zoraxy", "source": "github",