## Set up the RaspiBlitz for remote connections with ZeroTier

ZeroTier is a VPN service which is an easy option to connect remotely when neither port forwarding nor using Tor is possible (e.g. iOS on a remote network)

The drawback is that it requires installing a trusted package which gives access to your private network.  

Other, less trusted  methods to connect remotely:
* RTL access through HTTPS/SSL (needs port forwarding and a dynamicDNS)  
https://github.com/openoms/bitcoin-tutorials/blob/master/nginx/README.md
* Zeus access with a Tor auth cookie (needs an Android phone and Tor activated)  
https://github.com/openoms/bitcoin-tutorials/blob/master/Zeus_to_RaspiBlitz_through_Tor.md
* Setup port-forwarding with a SSH tunnel  https://github.com/rootzoll/raspiblitz/blob/master/FAQ.md#how-to-setup-port-forwarding-with-a-ssh-tunnel

Steps to install:

* Create a my.zerotier.com account and a network

* Go to https://my.zerotier.com/login and register. 
Use a STRONG PASSWORD as anyone with your credentials will have access to your private network.

* Click `Create a network` then record your `Network ID`.
* Install ZeroTier on the RaspiBlitz (more details on https://www.zerotier.com/download.shtml):
```
$ curl -s 'https://raw.githubusercontent.com/zerotier/download.zerotier.com/master/htdocs/contact%40zerotier.com.gpg' | gpg --import && \
if z=$(curl -s 'https://install.zerotier.com/' | gpg); then echo "$z" | sudo bash; fi
```

* Then run:

    `$ sudo zerotier-cli join [the network ID you previously recorded]`

* Install ZeroTier on your other devices: iOS, Android, Windows, Mac, Linux, etc. Use the same `network ID` you recorded before.
* Open https://my.zerotier.com  `Networks` menu and accept the new devices pending approval.

* On the Raspiblitz modify the lnd.conf manually:  
`$ nano /home/admin/.lnd/lnd.conf`  
add the line:  
`tlsextraip=172.X`  
CTRL+O and ENTER to save, CTRL+X to exit

* Renew the TLS certificates either from the EXPORT menu or run:  
`./config.scripts/lnd.newtlscert.sh`

After setting up and activating ZeroTier on my Android phone successfully tested: 
* ZeusLN using the IP 172.x.x.x and port 8080
* RTL from the outside on my 172.x.x.x:3000 address 
* Termius to connect with ssh to admin@172.x.x.x
---
* To uninstall run:
```
sudo systemctl stop zerotier-one
sudo apt remove zerotier-one
sudo rm -r /var/lib/zerotier-one
```
---

This guide is based on: https://medium.com/@ketominer/using-nodl-remotely-with-zerotier-a9a17cbb48cf

Discussion: https://github.com/rootzoll/raspiblitz/issues/601