nordlayer-nix

nordlayer on nixos · mit · nix.

nordlayer is nordsecurity’s business vpn. it ships only as a proprietary debian package, and its daemon assumes debian: paths hardcoded on the basis that files sit exactly where they would land there, which shows up as broken dns and a mangled resolv.conf on anything else. nixos is not debian, so i wrote the module that bridges the gap. the binary is patched to find its libraries in the nix store. the daemon runs inside an fhs chroot that hands it a normal /usr and /sbin, with the real /etc, /var and /run mounted through so its dns and database writes land on the live system. the cli on the host talks to the daemon over the socket they share. one flake input, services.nordlayer.enable = true, and nordlayer connect works. the approach mirrors how the community packages consumer nordvpn, with the same open-source libtelio core underneath, and the readme is a walk through every debian assumption and its patch.