Deploy zerotier-3 on DO

Changes the firewall config to allow the control UI to be reached from
all connected networks.

nodes/zerotier-3.json

@@ -0,0 +1,67 @@
+{
+  "name": "zerotier-3",
+  "normal": {
+    "knife_zero": {
+      "host": "165.232.88.175"
+    }
+  },
+  "automatic": {
+    "fqdn": "zerotier-3",
+    "os": "linux",
+    "os_version": "5.4.0-99-generic",
+    "hostname": "zerotier-3",
+    "ipaddress": "165.232.88.175",
+    "roles": [
+      "zerotier_controller"
+    ],
+    "recipes": [
+      "kosmos_zerotier::controller",
+      "kosmos_zerotier::firewall",
+      "kosmos_zerotier::zncui",
+      "kosmos-base",
+      "kosmos-base::default",
+      "kosmos-base::firewall",
+      "apt::default",
+      "timezone_iii::default",
+      "timezone_iii::debian",
+      "ntp::default",
+      "ntp::apparmor",
+      "kosmos-base::systemd_emails",
+      "apt::unattended-upgrades",
+      "kosmos-postfix::default",
+      "postfix::default",
+      "postfix::_common",
+      "postfix::_attributes",
+      "postfix::sasl_auth",
+      "hostname::default"
+    ],
+    "platform": "ubuntu",
+    "platform_version": "20.04",
+    "cloud": {
+      "public_ipv4_addrs": [
+        "165.232.88.175"
+      ],
+      "local_ipv4_addrs": [
+        "10.133.0.2"
+      ],
+      "provider": "digital_ocean",
+      "public_ipv4": "165.232.88.175",
+      "local_ipv4": "10.133.0.2"
+    },
+    "chef_packages": {
+      "chef": {
+        "version": "17.9.46",
+        "chef_root": "/opt/chef/embedded/lib/ruby/gems/3.0.0/gems/chef-17.9.46/lib",
+        "chef_effortless": null
+      },
+      "ohai": {
+        "version": "17.9.0",
+        "ohai_root": "/opt/chef/embedded/lib/ruby/gems/3.0.0/gems/ohai-17.9.0/lib/ohai"
+      }
+    }
+  },
+  "run_list": [
+    "role[zerotier_controller]",
+    "recipe[kosmos-base]"
+  ]
+}