try

system/services/containers/ollama/default.nix

@@ -8,6 +8,10 @@
     };
 
     config = lib.mkIf config.sysconfig.virtualization.ollama.enable {
+
+        networking = {
+            nat.internalInterfaces = [ "ve-ollama" ];
+        };
         
         containers.ollama = {
 
@@ -37,6 +41,11 @@
                     hostPath = "/dev/nvidia-uvm-tools";
                     isReadOnly = false;
                 };
+
+                "/dev/dri/renderD128" = {
+                    hostPath = "/dev/dri/renderD128";
+                    isReadOnly = false;
+                };
             };
 
             allowedDevices = [
@@ -60,6 +69,11 @@
                     node = "/dev/nvidia-uvm-tools";
                     modifier = "rw";
                 }
+
+                {
+                    node = "/dev/dri/renderD128";
+                    modifier = "rw";
+                }
             ];
 
             config = {