for the private networking problem, openziti (apache 2.0) is now integrated with Nix:

https://github.com/NixOS/nixpkgs/pull/453502