nordlayer-nix

nordlayer on nixos · mit · nix.

what i did

nordlayer is nordsecurity’s business vpn. it ships only as a proprietary debian package, and its daemon assumes debian: paths hardcoded on the basis that files sit exactly where they would land there, which shows up as broken dns and a mangled resolv.conf on anything else. nixos is not debian, so i wrote the module that bridges the gap: the binary patched to find its libraries in the nix store, the daemon run inside an fhs chroot that hands it a normal /usr and /sbin, the real /etc, /var and /run mounted through so its dns and database writes land on the live system, the cli on the host talking to the daemon over the socket they share. one flake input, services.nordlayer.enable = true, and nordlayer connect works. the approach mirrors how the community packages consumer nordvpn, the same open-source libtelio core underneath, and the readme is a walk through every debian assumption and its patch.

sources

• nordlayer-nix on github, a mirror of git.sr.ht/~caldempsey/nordlayer-nix, june 2026.
• the ground it stands on: libtelio, nord’s open-source core; nixpkgs #101864, the request to package nordvpn; the community’s nordvpn flakes.