I have ZeroTierOne running which I would like to SSH to, however every time I reboot my unraid server, or even restart the service now - the ListenAddress in ssd_config goes back to the BR0 address / LAN address but I want it to be a custom address or 0.0.0.0. 

 

I have tried editing /boot/config/ssh/sshd_config and /etc/ssh/sshd_config locations but after a reboot both are reset back to the br0 address. 

 

I have the SSH plugin installed which I am not sure if it's doing something. There doesn't look to be any way of setting the listen address in here, so my next option would be to remove it, but I wanted to get some opinions in first before I sarted doing that. 

 

Does anyone have any ideas why this keeps resetting back to the default LAN and not what I've set it to?

 

Edited May 24, 20242 yr by tomwhi

You will need to run a user script and edit sshd to add the zero tier ip to the ssh server.
once the script is edited you need to restart the service...
the running config is in /etc/ssh/ ...
 

For a permeant solution:
go too /boot/config/sshd/sshd_config

add a listen address to the zero tier network:

and reboot to apply custom sshd config

Thank you @bmartino1 however I have already tried this as I mentioned in the original post and when I restart the service the settings are reset back to br0. 

 

This is the proccess I'm following: 

 

nano /etc/ssh/sshd_config  --->  Add the new network 

 

 

/etc/rc.d/rc.sshd restart --->  Restart the SSHD service 

 

 

nano /etc/ssh/sshd_config  --->  Open the config file again to see that my config has been erased. 

 

 

I don't think adding this as a user script will help the problem I'm encountering where my config alterations are being wiped out. 

 

I can also confirm that after a reboot the /boot/config/ssh/sshd_config is overwritten and reset back to just my default bridge, even though I added the extra IP address of my ZTO interface in here as another line.

 

 

 

Any ideas for why when I restart the service the default br0 network is being added back into the config?

Edited May 24, 20242 yr by tomwhi

Hi @tomwhi ,

I came to this topic for the same reason you generated (zerotier) , searching and testing I have added in the go file (etc/config/go) the following:

/boot/config/go

cp /boot/sshd_config /etc/sshd/sshd_config

chmod 600 /etc/ssh/sshd_config

/usr/sbin/sshd

The above allows you to override permissions and start the daemon manually, since directly as it would be (rc.local) would not work. I hope it helps you

NOTE: I disabled the ssh service from unraid config

Edited June 17, 20251 yr by zobber

Hi,

I have found a much easier way and that already brings the tool (check first the docs :p) in which you declare the name of the zerotier interface in this way will be linked locally and so you can have access to ssh, nginx and others.

Go to:

Setting -> Network Setting -> Interface Extra

netstat -tunlp o ss -tunlp to check:

??? ...

https://www.youtube.com/shorts/crDokVQTQiY

https://forums.unraid.net/topic/68376-install-zerotier-in-unraid/

https://github.com/Spikhalskiy/zerotier-unraid-docker

https://github.com/SpaceinvaderOne/Unraid-ZeroTier-Server-Restart-fix

https://www.youtube.com/watch?v=oC7y_qYKUTU

Space invader has some vidoes to use and implemnt ziero tier on unraid via docker
see:
https://forums.unraid.net/topic/68376-install-zerotier-in-unraid/

and support forum from CA:
https://forums.unraid.net/topic/72030-support-spikhalskiy-zerotier/

On 6/17/2025 at 4:24 AM, zobber said:

Hi,

I have found a much easier way and that already brings the tool (check first the docs :p) in which you declare the name of the zerotier interface in this way will be linked locally and so you can have access to ssh, nginx and others.

Go to:

Setting -> Network Setting -> Interface Extra

netstat -tunlp o ss -tunlp to check:

This is a great update - thanks for keeping us up to date and sharing your progress too.

I actually sacked off ZTO in favour of Tailscale now. It seemed to integrate a lot easier into the Unraid OS and I've got some really sexy features like using SWAG with Tailscale to provide me an internal reverse proxy. I might look at ZTO again in the future but for now this seems to be working with a lot more stability.