diff --git a/nix/os/devices/sj-bm-hostkey0/configuration.nix b/nix/os/devices/sj-bm-hostkey0/configuration.nix
index 4e82eb8..ca1551e 100644
--- a/nix/os/devices/sj-bm-hostkey0/configuration.nix
+++ b/nix/os/devices/sj-bm-hostkey0/configuration.nix
@@ -173,4 +173,9 @@ in {
   boot.binfmt.emulatedSystems = [
     "aarch64-linux"
   ];
+
+  steveej.holo-zerotier = {
+    enable = true;
+    autostart = false;
+  };
 }
diff --git a/nix/os/snippets/holo-zerotier.nix b/nix/os/snippets/holo-zerotier.nix
index dc02fdc..8b09cea 100644
--- a/nix/os/snippets/holo-zerotier.nix
+++ b/nix/os/snippets/holo-zerotier.nix
@@ -11,6 +11,8 @@ in {
   };
 
   config = {
+    nixpkgs.config.allowUnfreePredicate = pkg: builtins.elem (lib.getName pkg) [ "zerotierone" ];
+
     services.zerotierone = {
       enable = cfg.enable;
       joinNetworks = [