diff --git a/system/virtualization/docker/netbird/default.nix b/system/virtualization/docker/netbird/default.nix
index aba598c..b14e7ce 100644
--- a/system/virtualization/docker/netbird/default.nix
+++ b/system/virtualization/docker/netbird/default.nix
@@ -7,10 +7,9 @@
 
     config = lib.mkIf (config.sysconfig.docker.netbird.enable && config.sysconfig.docker.enable) {
 
-        sops.secrets = {
-            "netbird/pass" = {};
-            "netbird/secret_key" = {};
-        };
+        networking.firewall.allowedUDPPorts = [ 3478 ];
+
+        sops.secrets."netbird/secret_key" = {};
 
         sops.templates."netbird-relay.env" = {
             content = ''