diff --git a/modules/features/gitea.nix b/modules/features/gitea.nix
index 6142049..a32c4c1 100644
--- a/modules/features/gitea.nix
+++ b/modules/features/gitea.nix
@@ -118,6 +118,7 @@
 
         config = {
 
+            networking.firewall.allowedTCPPorts = [ 2222 ];
 
             virtualisation.oci-containers.containers."${name}" = {
                 image = "docker.gitea.com/gitea:1.25.4";
diff --git a/modules/hosts/homebox/configuration.nix b/modules/hosts/homebox/configuration.nix
index fe079d6..f9c3535 100644
--- a/modules/hosts/homebox/configuration.nix
+++ b/modules/hosts/homebox/configuration.nix
@@ -11,8 +11,9 @@
                 self.nixosModules.default
                 pipewire
                 avahi
-                netbird
+                netbird-sbc
                 openssh
+                sops
 
                 docker
 
@@ -23,7 +24,7 @@
                 netbird-docker
                 n8n
                 code-server
-                gitea
+                gitea-docker
                 jellyfin
                 nginx
                 ollama-docker
@@ -80,6 +81,8 @@
                 };
             };
 
+            sops.secrets."netbirdKey".sopsFile = lib.mkForce ./secrets.yaml;
+
             services.netbird.clients.default.environment = {
                 NB_EXTRA_DNS_LABELS = "server";
             };