docs(nanokvm-go): add ZeroTier remote network guide

Add Chinese and English ZeroTier guides with installation, network join,
ZeroTier Central authorization, and external access steps, plus
Chinese and English screenshots.

docs/hardware/en/kvm/NanoKVM_Go/changelog.md

@@ -5,3 +5,4 @@
 - Created this page to centralize documentation updates for NanoKVM Go / NanoKVM Go+.
 - Added the NetBird remote network guide, covering installation, enabling, SSO login, and external access; added Chinese and English screenshots and sidebar entries. The guide also notes that the integration currently uses NetBird Cloud only and does not enable LAN subnet routes or DNS.
 - Added Chinese and English Sipeed Remote Network disclaimer pages for direct access from the device QR code; the pages are URL-only, with Chinese and English screenshots and a ✓/✕ note.
+- Added the ZeroTier remote network guide, covering installation, joining a network, authorization in ZeroTier Central, and external access; added Chinese and English screenshots and sidebar entries.

docs/hardware/en/kvm/NanoKVM_Go/network/zerotier.md

@@ -0,0 +1,230 @@
+# ZeroTier
+
+## Introduction to ZeroTier
+
+ZeroTier is a virtual networking tool. It joins NanoKVM Go, your computer, and your phone to the same virtual network, so you can reach NanoKVM Go from outside even without a public IP address or router port forwarding.
+
+NanoKVM Go integrates the ZeroTier client. You can install it, enable it, and join a network entirely from the web console, without enabling SSH or downloading anything manually.
+
+After joining, NanoKVM Go gets a virtual IP assigned by ZeroTier. Install the ZeroTier client on the access device, join the same network, and open that address in a browser.
+
+```text
+NanoKVM Go -- ZeroTier virtual network -- remote computer or phone
+```
+
+> The ZeroTier integration does not automatically share NanoKVM Go's local network with other members. Access to other devices on that LAN depends on the Managed Routes configured in the ZeroTier network.
+
+## Compared with other remote network options
+
+ZeroTier belongs to the same category as [Tailscale](tailscale.html), [NetBird](netbird.html), and [Sipeed Remote Network](sipeed_remote_network.html): a virtual network that does not require a public server. The main differences are how a device joins the network and how it is authorized:
+
+| Option | Network identifier | Device authorization | Client on the access device |
+| --- | --- | --- | --- |
+| ZeroTier | 16-digit hexadecimal Network ID | Authorize the Node ID in ZeroTier Central | ZeroTier |
+| NetBird | NetBird account | Sign in to the same account | NetBird |
+| Tailscale | Tailscale account / Tailnet | Sign in to the same account | Tailscale |
+| Sipeed Remote Network | Sipeed pairing code | 6-digit claim code + 3-digit verification | Tailscale |
+
+ZeroTier does not require signing in to an account on NanoKVM Go, but you must create a network in ZeroTier Central and authorize the NanoKVM Go Node ID there.
+
+[frp](frp.html) and [Cloudflare Tunnel](cloudflare_tunnel.html) are tunneling solutions that require a public server or a domain. [Static IP](static_ip.html) only fixes the LAN address and cannot provide external access.
+
+> The page does not provide a configuration entry for a self-hosted ZeroTier controller or a custom Planet. Use a network hosted on ZeroTier Central.
+
+## Prerequisites
+
+Before you start, make sure that:
+
+- NanoKVM Go is connected to the internet;
+- The NanoKVM Go web console is reachable on the local network;
+- The NanoKVM Go system and app are updated to the latest version;
+- NanoKVM Go can reach `download.zerotier.com`, because the ZeroTier package is downloaded during installation;
+- You have a ZeroTier account and have created a network in ZeroTier Central;
+- You know the 16-digit hexadecimal Network ID to join;
+- The computer or phone you use for remote access can install the ZeroTier client.
+
+> If ZeroTier is not listed under `Settings` > `Remote Network`, update the NanoKVM Go app first.
+
+## Create a ZeroTier network
+
+Skip this section if you already have a usable ZeroTier network. Just note its Network ID.
+
+1. Open [ZeroTier Central](https://my.zerotier.com/) and sign in;
+
+![ZeroTier Central sign-in page](../../../../assets/NanoKVM/go/network/zerotier_central_login.webp)
+
+2. Create a network (`Create A Network`);
+
+![Create a network in ZeroTier Central](../../../../assets/NanoKVM/go/network/zerotier_central_create_network.webp)
+
+3. Open the network settings and find `Network ID`, a 16-digit hexadecimal string;
+
+![Network ID in the ZeroTier network settings](../../../../assets/NanoKVM/go/network/zerotier_central_network_id.webp)
+
+4. Check `Access Control`: the default `Private` requires manual authorization, while `Public` allows devices to join automatically;
+5. Note the Network ID. You will enter it on NanoKVM Go later.
+
+> If the network is `Private`, you will need to authorize both NanoKVM Go and the access device under `Members`.
+
+## Install and enable ZeroTier on NanoKVM Go
+
+### Open the ZeroTier settings
+
+1. Sign in to the NanoKVM Go web console and click the settings icon in the top toolbar;
+2. Select `Remote Network` on the left, then click the `ZeroTier` card.
+
+![Open ZeroTier from the Remote Network page in NanoKVM Go](../../../../assets/NanoKVM/go/network/nanokvm_go_zerotier_entry_en.webp)
+
+The ZeroTier page shows `ZeroTier not found! Please install.`
+
+### Install the ZeroTier client
+
+1. Click `Install`;
+2. Wait for the installation to finish. The page shows `Installing`. The package is downloaded from ZeroTier's official site, so the time depends on the device's network.
+
+![Install button for ZeroTier](../../../../assets/NanoKVM/go/network/nanokvm_go_zerotier_install_en.webp)
+
+When installation finishes, the status changes to `Disabled`. If installation fails, make sure the device can reach `download.zerotier.com` and try again.
+
+### Enable ZeroTier
+
+1. Click `Enable`;
+2. Wait for the status to change from `Disabled` to `No networks joined`.
+
+![Disabled ZeroTier with the Enable button](../../../../assets/NanoKVM/go/network/nanokvm_go_zerotier_enable_en.webp)
+
+`No networks joined` means the client is running but has not joined any ZeroTier network yet.
+
+> If the page reports `The TUN device is unavailable.`, the virtual network adapter is not available. Make sure the system and app are up to date. If the error remains, contact support.
+
+## Join a network and authorize the device
+
+1. Enter the 16-digit hexadecimal Network ID in `Network ID`, for example `0123456789abcdef`, then click `Join`;
+
+![Enter the ZeroTier Network ID and join](../../../../assets/NanoKVM/go/network/nanokvm_go_zerotier_join_en.webp)
+
+2. The page enters `Waiting for network authorization` and shows the local `Node ID` (a 10-digit hexadecimal string);
+3. Click `Open ZeroTier Central`, find this Node ID in the network's `Members` list, and authorize it;
+4. Return to the NanoKVM Go page and wait for the status to change to `Connected`;
+5. The page shows an `Access address`, for example `https://10.x.x.x` or `https://192.168.x.x`, depending on the address assigned by ZeroTier.
+
+![Node ID shown while waiting for network authorization](../../../../assets/NanoKVM/go/network/nanokvm_go_zerotier_authorizing_en.webp)
+
+![Authorize the NanoKVM Go node in ZeroTier Central](../../../../assets/NanoKVM/go/network/zerotier_central_authorize.webp)
+
+![ZeroTier connected with an access address](../../../../assets/NanoKVM/go/network/nanokvm_go_zerotier_connected_en.webp)
+
+> If the status is `Not authorized or authorization revoked`, check the node's authorization in ZeroTier Central. If the page reports `Network not found`, verify the Network ID.
+
+## Install the ZeroTier client on the access device
+
+Install the ZeroTier client on the computer or phone that will access NanoKVM Go:
+
+| Platform | Installation |
+| --- | --- |
+| Windows | Download and install from the [ZeroTier download page](https://www.zerotier.com/download/) |
+| macOS | Download and install from the [ZeroTier download page](https://www.zerotier.com/download/) |
+| Linux | Follow the instructions on the [ZeroTier download page](https://www.zerotier.com/download/) |
+| Android | Install from [Google Play](https://play.google.com/store/apps/details?id=com.zerotier.one) |
+| iOS / iPadOS | Install from the [App Store](https://apps.apple.com/app/zerotier/id1450921335) |
+
+After installation:
+
+1. Start the ZeroTier client and use `Join Network` to join the same Network ID as NanoKVM Go;
+
+![Join a network in the ZeroTier client](../../../../assets/NanoKVM/go/network/zerotier_client_join_network.webp)
+
+2. If the network is `Private`, authorize this access device under `Members` in ZeroTier Central;
+
+![Authorize the access device under Members in ZeroTier Central](../../../../assets/NanoKVM/go/network/zerotier_central_members.webp)
+
+3. Confirm that the client is connected.
+
+![ZeroTier client connected on the access device](../../../../assets/NanoKVM/go/network/zerotier_client_connected.webp)
+
+> The access device and NanoKVM Go must join the same ZeroTier network and both be allowed by the network.
+
+## Access NanoKVM Go from outside
+
+To make sure you are testing an external connection, disconnect the access device from its current Wi-Fi and use a phone hotspot or mobile data instead.
+
+1. Confirm that the ZeroTier client on the access device is connected;
+2. Enter the `Access address` shown on the NanoKVM Go page in the browser address bar, for example `https://10.x.x.x`;
+3. If the browser warns about an untrusted certificate, follow the browser prompt to continue. NanoKVM Go uses a self-signed certificate, so the warning is expected;
+4. Open the NanoKVM Go login page and sign in;
+5. Test the remote screen, keyboard and mouse control, and power control.
+
+> If the page does not open, check that the access device has joined the same network and been authorized, the NanoKVM Go page shows `Connected`, and the access address is still the currently assigned address.
+
+## Manage joined networks
+
+- Joined networks are listed in the ZeroTier card, with their status and access addresses;
+- Click `Leave` to leave a network. Sessions using that network will disconnect;
+- Uninstalling ZeroTier stops and removes the client but keeps the node identity and network memberships, so you can continue after reinstalling.
+
+## Daily use and security
+
+- Set a strong password for NanoKVM Go and keep the device's own login enabled;
+- Enable MFA for your ZeroTier account;
+- Use a `Private` network and authorize only nodes you trust;
+- Review the `Members` list in ZeroTier Central regularly and remove nodes you no longer use;
+- Do not open additional NanoKVM Go ports on the router for ZeroTier;
+- Click `Disable` when you do not need remote access, or revoke authorization in Central;
+- Keep the NanoKVM Go app and the ZeroTier client on the access device up to date.
+
+## FAQ
+
+### ZeroTier is missing from the settings page
+
+Check that the NanoKVM Go app is up to date, then reopen `Settings` > `Remote Network`.
+
+### Installation failed
+
+The package is downloaded from `download.zerotier.com`, so failures are usually caused by network or storage problems. Make sure the device can reach that site and has enough free space, then retry.
+
+### ZeroTier is already installed on the device and the page installation fails
+
+The built-in installer does not overwrite an existing ZeroTier installation. Uninstall the ZeroTier client installed from a package or another method, then retry from the page.
+
+### The page reports that the TUN device is unavailable
+
+ZeroTier requires the `/dev/net/tun` virtual network device. Make sure the system and app are up to date. If the error remains, contact support.
+
+### The page reports an invalid Network ID
+
+The Network ID must be 16 hexadecimal characters and cannot be all zeros. Copy it again from the network settings in ZeroTier Central.
+
+### The page stays on “Waiting for network authorization”
+
+The node has not been allowed by the network yet. Open `Members` in ZeroTier Central, find the `Node ID` shown on the page, and authorize it. If the network is `Private`, authorize the access device separately.
+
+### The page reports “Network not found”
+
+Check that the Network ID is correct and that the network belongs to the ZeroTier account you are signed in to.
+
+### The page stays on “Waiting for an assigned address”
+
+ZeroTier has not assigned an address to the device yet. Check the network's IPv4 auto-assignment settings, or wait for the network to deliver its configuration.
+
+### The status is Connected but the browser cannot open the page
+
+Check that the access device and NanoKVM Go are in the same network, both are authorized, the NanoKVM Go page shows `Connected`, and the access address matches the current assignment. If needed, ping the address from the access device.
+
+### Can I reach other devices on the NanoKVM Go LAN through ZeroTier?
+
+Not automatically. NanoKVM Go only adds itself to the virtual network and does not automatically share its local LAN. If the network has Managed Routes, access depends on the routes and authorization.
+
+### Can I connect to a self-hosted ZeroTier controller?
+
+The page does not provide a configuration entry for a self-hosted controller or a custom Planet. Use a network hosted on ZeroTier Central.
+
+### Do I need to rejoin the network after uninstalling ZeroTier?
+
+Uninstalling stops and removes the client but keeps the node identity and network memberships. After reinstalling and enabling it, the existing network usually continues to work. If the page shows an unexpected state, join the network again.
+
+## Next steps
+
+- To use a Tailscale network, or to avoid creating a ZeroTier account, see [Tailscale](tailscale.html) and [Sipeed Remote Network](sipeed_remote_network.html);
+- If you have a public server or your own domain, see [frp](frp.html) and [Cloudflare Tunnel](cloudflare_tunnel.html);
+- To keep a fixed LAN address, see [Static IP](static_ip.html);
+- For other issues, see the [NanoKVM Go FAQ](../faq.html).

docs/hardware/en/sidebar.yaml

@@ -602,6 +602,8 @@ items:
                 file: kvm/NanoKVM_Go/network/sipeed_remote_network.md
             -   label: NetBird
                 file: kvm/NanoKVM_Go/network/netbird.md
+            -   label: ZeroTier
+                file: kvm/NanoKVM_Go/network/zerotier.md
             -   label: frp
                 file: kvm/NanoKVM_Go/network/frp.md
             -   label: Cloudflare Tunnel

docs/hardware/zh/kvm/NanoKVM_Go/changelog.md

@@ -5,3 +5,4 @@
 - 创建此文档，用来集中记录 NanoKVM Go / NanoKVM Go+ 文档的更新内容。
 - 新增 NetBird 远程网络文档，覆盖安装、启用、SSO 登录和外网访问；补充中英文界面截图，并加入中英文侧边栏。文档同时说明当前固定使用 NetBird Cloud，且不启用局域网子网路由和 DNS。
 - 新增中英文 Sipeed 远程网络免责声明页面，供设备二维码通过 URL 直接访问；页面不加入侧边栏，并补充中英文界面截图和 ✓/✕ 说明。
+- 新增 ZeroTier 远程网络文档，覆盖安装、加入网络、ZeroTier Central 授权和外网访问；补充中英文界面截图并加入中英文侧边栏。

docs/hardware/zh/kvm/NanoKVM_Go/network/zerotier.md

@@ -0,0 +1,221 @@
+# ZeroTier
+
+## ZeroTier 简介
+
+ZeroTier 是一款虚拟组网工具。它可以把 NanoKVM Go 和你的电脑、手机加入同一个虚拟网络，即使设备没有公网 IP、路由器也没有做端口映射，也能从外网访问 NanoKVM Go。
+
+NanoKVM Go 已经集成 ZeroTier 客户端，安装、启用和加入网络都可以在网页控制端完成，不需要开启 SSH，也不需要手动下载程序。
+
+加入网络后，NanoKVM Go 会获得 ZeroTier 分配的虚拟 IP。访问端安装 ZeroTier 客户端并加入同一个网络后，在浏览器中打开这个地址即可。
+
+```text
+NanoKVM Go ── ZeroTier 虚拟网络 ── 外网电脑或手机
+```
+
+> NanoKVM Go 的 ZeroTier 集成不会自动把设备所在局域网共享给其他成员；能否访问局域网中的其他设备，取决于 ZeroTier 网络是否配置了对应的 Managed Route。
+
+## 与其他远程网络方式的区别
+
+ZeroTier 和 [Tailscale](tailscale.html)、[NetBird](netbird.html)、[Sipeed 远程网络](sipeed_remote_network.html) 一样，属于虚拟组网方案，不需要公网服务器。区别主要在网络的加入和授权方式：
+
+| 方式 | 网络标识 | 设备授权 | 访问端客户端 |
+| --- | --- | --- | --- |
+| ZeroTier | 16 位十六进制 Network ID | 在 ZeroTier Central 授权 Node ID | ZeroTier |
+| NetBird | NetBird 账号 | 登录同一账号 | NetBird |
+| Tailscale | Tailscale 账号 / Tailnet | 登录同一账号 | Tailscale |
+| Sipeed 远程网络 | Sipeed 配对码 | 6 位认领码 + 3 位核对 | Tailscale |
+
+ZeroTier 不需要在 NanoKVM Go 上登录账号，但需要先在 ZeroTier Central 创建网络，并在 Central 中授权 NanoKVM Go 的 Node ID。
+
+[frp](frp.html) 和 [Cloudflare Tunnel](cloudflare_tunnel.html) 属于内网穿透，需要公网服务器或域名；[静态 IP](static_ip.html) 只固定局域网地址，不能从外网访问。
+
+> 页面不提供自建 ZeroTier 控制器或自定义 Planet 的配置入口，请使用 ZeroTier Central 上的网络。
+
+## 使用前准备
+
+开始配置前，请确认：
+
+- NanoKVM Go 已连接互联网；
+- 可以在局域网内正常访问 NanoKVM Go 网页控制端；
+- NanoKVM Go 的系统和应用已更新至最新版本；
+- NanoKVM Go 可以访问 `download.zerotier.com`，安装 ZeroTier 客户端时需要下载安装包；
+- 有一个 ZeroTier 账号，并已经在 ZeroTier Central 创建了网络；
+- 知道要加入的 16 位十六进制 Network ID；
+- 用于外网访问的电脑或手机可以安装 ZeroTier 客户端。
+
+> 如果 `设置` > `远程网络` 中没有 ZeroTier，请先更新 NanoKVM Go 的应用。
+
+## 创建 ZeroTier 网络
+
+如果已经有可用的 ZeroTier 网络，可以跳过本节，直接记下 Network ID。
+
+1. 打开 [ZeroTier Central](https://central.zerotier.com/) 后登录。
+
+![ZeroTier Central 登录页面](../../../../assets/NanoKVM/go/network/zerotier_central_login.webp)
+
+2. 按照网页的引导，创建一个网络（`Create A Network`）；
+
+![在 ZeroTier Central 创建网络](../../../../assets/NanoKVM/go/network/zerotier_central_create_network.webp)
+
+3. 找到 `Network ID`，它是一串 16 位十六进制字符，记下 Network ID，后面要在 NanoKVM Go 上填写；
+
+![ZeroTier 网络设置中的 Network ID](../../../../assets/NanoKVM/go/network/zerotier_central_network_id.webp)
+
+## 在 NanoKVM Go 上安装并启用 ZeroTier
+
+### 打开 ZeroTier 设置
+
+1. 登录 NanoKVM Go 网页控制端，点击顶部工具栏中的设置图标；
+2. 在设置页面左侧选择 `远程网络`，然后点击 `ZeroTier` 卡片。
+
+![在 NanoKVM Go 的远程网络页面打开 ZeroTier](../../../../assets/NanoKVM/go/network/nanokvm_go_zerotier_entry.webp)
+
+进入 ZeroTier 页面后，页面提示 `未检测到 ZeroTier，请先安装`。
+
+### 安装 ZeroTier 客户端
+
+1. 点击 `安装`；
+
+![ZeroTier 的安装按钮](../../../../assets/NanoKVM/go/network/nanokvm_go_zerotier_install.webp)
+
+2. 等待安装完成。页面显示 `正在安装`，安装包从 ZeroTier 官方站点下载，耗时取决于设备的网络情况。
+
+安装完成后，状态变为 `已停用`。如果提示安装失败，先确认设备可以正常访问 `download.zerotier.com`，再重试。
+
+### 启用 ZeroTier
+
+1. 点击 `启用`；
+
+![ZeroTier 已停用状态和启用按钮](../../../../assets/NanoKVM/go/network/nanokvm_go_zerotier_enable.webp)
+
+2. 等待状态从 `已停用` 变为 `尚未加入网络`。
+
+页面显示 `尚未加入网络`，说明客户端已经运行，但还没有加入任何 ZeroTier 网络。
+
+## 加入网络并授权设备
+
+1. 在 `网络 ID` 中填入 16 位十六进制 Network ID，例如 `e5cd7a9e1c9473c8`，然后点击 `加入`；
+
+![填写 ZeroTier 网络 ID 并加入](../../../../assets/NanoKVM/go/network/nanokvm_go_zerotier_join.webp)
+
+2. 页面进入 `等待网络授权`，并显示本机的 `节点 ID`（10 位十六进制字符）；
+
+![等待网络授权时显示的节点 ID](../../../../assets/NanoKVM/go/network/nanokvm_go_zerotier_authorizing.webp)
+
+3. 点击 `前往 ZeroTier Central`，同意一下加入网络的授权。
+
+![在 ZeroTier Central 中授权 NanoKVM Go 节点](../../../../assets/NanoKVM/go/network/zerotier_central_authorize.webp)
+
+4. 回到 NanoKVM Go 页面，等待状态自动变为 `已连接`；
+
+![ZeroTier 已连接并显示访问地址](../../../../assets/NanoKVM/go/network/nanokvm_go_zerotier_connected.webp)
+
+5. 页面会显示 `访问地址`，例如 `https://10.x.x.x` 或 `https://192.168.x.x`，以 ZeroTier 实际分配的地址为准。
+
+> 如果状态是 `尚未授权或授权已撤销`，回到 ZeroTier Central 检查该节点的授权；如果提示 `网络不存在`，检查 Network ID 是否填写正确。
+
+## 在访问端安装 ZeroTier 客户端
+
+在需要远程访问 NanoKVM Go 的电脑或手机上安装 ZeroTier 客户端：
+
+| 平台 | 安装方式 |
+| --- | --- |
+| Windows | 从 [ZeroTier 下载页](https://www.zerotier.com/download/) 下载安装 |
+| macOS | 从 [ZeroTier 下载页](https://www.zerotier.com/download/) 下载安装 |
+| Linux | 参考 [ZeroTier 下载页](https://www.zerotier.com/download/) 的安装说明 |
+| Android | 从 [Google Play](https://play.google.com/store/apps/details?id=com.zerotier.one) 安装 |
+| iOS / iPadOS | 从 [App Store](https://apps.apple.com/app/zerotier/id1450921335) 安装 |
+
+安装完成后：
+
+1. 启动 ZeroTier 客户端，使用 `Join Network` 加入与 NanoKVM Go 相同的 Network ID；
+
+![在 ZeroTier 客户端中加入网络](../../../../assets/NanoKVM/go/network/zerotier_client_join_network.webp)
+
+2. 在 ZeroTier Central 的 `Members` 中授权这台访问端；
+
+![在 ZeroTier Central 的 Members 中授权访问端](../../../../assets/NanoKVM/go/network/zerotier_central_members.webp)
+
+3. 确认客户端状态为已连接。
+
+> 访问端和 NanoKVM Go 必须加入同一个 ZeroTier 网络，并且都被网络允许访问。
+
+## 从外网访问 NanoKVM Go
+
+为避免测到的其实是局域网直连，建议先断开访问端当前的 Wi-Fi，改用手机热点或移动网络。
+
+1. 确认访问端的 ZeroTier 客户端已经连接；
+
+![访问端 ZeroTier 客户端已连接](../../../../assets/NanoKVM/go/network/zerotier_client_connected.webp)
+
+2. 在浏览器地址栏输入 NanoKVM Go 页面显示的 `访问地址`，例如 `https://10.x.x.x`；
+3. 如果浏览器提示证书不受信任，按浏览器提示继续访问。NanoKVM Go 使用自签名证书，这个提示正常；
+4. 打开 NanoKVM Go 登录页面并完成登录；
+5. 测试远程画面、键鼠控制和电源控制等功能。
+
+> 如果页面打不开，先确认访问端已加入同一网络并通过授权，NanoKVM Go 页面显示 `已连接`，并且访问地址是当前有效的分配地址。
+
+## 管理已加入的网络
+
+- 已加入的网络会显示在 ZeroTier 卡片中，包含网络状态和访问地址；
+- 点击 `退出` 可以离开当前网络，通过该网络访问的会话会断开；
+- 卸载 ZeroTier 会停止并移除客户端，但会保留节点身份和网络成员关系，重新安装后可以继续使用。
+
+## 日常使用与安全建议
+
+- 为 NanoKVM Go 设置强密码，并保留设备自身的登录认证；
+- 为 ZeroTier 账号启用 MFA；
+- 使用 `Private` 网络，只授权自己信任的节点；
+- 定期检查 ZeroTier Central 的 `Members` 列表，移除不再使用的节点；
+- 不要为了 ZeroTier 在路由器上额外开放 NanoKVM Go 的端口；
+- 不需要远程访问时，可以在 ZeroTier 页面点击 `停用`，或在 Central 中撤销授权；
+- 定期更新 NanoKVM Go 的应用和访问端的 ZeroTier 客户端。
+
+## 常见问题
+
+### 设置页面中没有 ZeroTier 选项？
+
+先检查 NanoKVM Go 的应用是否为最新版本，更新后重新打开 `设置` > `远程网络`。
+
+### 安装失败怎么办？
+
+安装包从 `download.zerotier.com` 下载，失败通常与网络或存储空间有关。确认设备可以访问该站点、剩余空间充足后重试。
+
+### 设备上已经安装过 ZeroTier，页面安装失败？
+
+内置安装不会覆盖系统中已有的 ZeroTier。请先卸载通过软件包或其他方式安装的 ZeroTier，再回到页面重新安装。
+
+### 提示 Network ID 无效？
+
+Network ID 必须是 16 位十六进制字符，且不能全为零。请从 ZeroTier Central 的网络设置中重新复制。
+
+### 提示“网络不存在”？
+
+检查 Network ID 是否填写正确，以及该网络是否属于当前登录的 ZeroTier 账号。
+
+### 提示“等待分配地址”？
+
+ZeroTier 网络还没有给设备分配地址。检查网络的 IPv4 自动分配设置，或等待网络下发配置。
+
+### 显示已连接，但浏览器打不开？
+
+依次确认：访问端和 NanoKVM Go 在同一个网络；两端都已授权；NanoKVM Go 页面显示 `已连接`；访问地址与当前分配地址一致。必要时在访问端 `ping` 一下该地址。
+
+### 能通过 ZeroTier 访问 NanoKVM Go 所在局域网的其他设备吗？
+
+不会自动可以。NanoKVM Go 只把自己加入虚拟网络，不会自动把本机局域网共享出去；如果网络配置了 Managed Route，能否访问取决于具体路由和授权。
+
+### 可以连接自建的 ZeroTier 控制器吗？
+
+目前页面没有自建控制器或自定义 Planet 的配置入口，请使用 ZeroTier Central 上的网络。
+
+### 卸载 ZeroTier 后需要重新加入网络吗？
+
+卸载会停止并移除客户端，但会保留节点身份和网络成员关系。重新安装并启用后，通常可以继续使用原来的网络；如果页面显示异常，重新加入一次即可。
+
+## 下一步
+
+- 想在设备之间使用 Tailscale 网络，或不想注册 ZeroTier 账号，可以参考 [Tailscale](tailscale.html) 和 [Sipeed 远程网络](sipeed_remote_network.html)；
+- 有公网服务器或自有域名时，可以参考 [frp](frp.html) 和 [Cloudflare Tunnel](cloudflare_tunnel.html)；
+- 只希望局域网地址固定，参考 [静态 IP](static_ip.html)；
+- 遇到其他问题，查看 [NanoKVM Go 常见问题](../faq.html)。

docs/hardware/zh/sidebar.yaml

@@ -605,6 +605,8 @@ items:
                 file: kvm/NanoKVM_Go/network/sipeed_remote_network.md
             -   label: NetBird
                 file: kvm/NanoKVM_Go/network/netbird.md
+            -   label: ZeroTier
+                file: kvm/NanoKVM_Go/network/zerotier.md
             -   label: frp
                 file: kvm/NanoKVM_Go/network/frp.md
             -   label: Cloudflare Tunnel