diff --git a/system-config/services/containers/netbird/default.nix b/system-config/services/containers/netbird/default.nix index 5e28bf6..29a4e1e 100644 --- a/system-config/services/containers/netbird/default.nix +++ b/system-config/services/containers/netbird/default.nix @@ -21,13 +21,17 @@ enable = config.sysconfig.opts.netbird.enable; }; - networking.firewall = { - allowedUDPPorts = [ 3478 ]; - allowedUDPPortRanges = [{ from = 51100; to = 56100; }]; + networking = { + firewall = lib.mkIf config.sysconfig.opts.virtualization.netbird.enable { + allowedUDPPorts = [ 3478 ]; + allowedUDPPortRanges = [{ from = 51100; to = 56100; }]; + }; + nat.internalInterfaces = [ "ve-netbird" ]; }; sops.secrets."netbird/coturnPass" = lib.mkIf config.sysconfig.opts.virtualization.netbird.enable {}; + containers.netbird = lib.mkIf config.sysconfig.opts.virtualization.netbird.enable { autoStart = true;