u/Jfishie5

Is anyone using a mesh vpn like NetBird? Whenever a mullvad connection is active on macOS NetBird breaks. Enabling split tunnelling for NetBird and local network sharing do not allow Netbird traffic through. I see other posts about spilt tunnelling being broken.

Netbird desktop app will not say connected on macOS when mullvad is active. This may be a mullvad question but was wondering if there was a solution or adjustment I need to make in my self hosted netbird in docker instance.

What solution do others use when remote?

I am trying to set up a cluster in NetBird to control external access to services.

The quick start script binds ports 80 and 443 inside the Traefik container for authentic ssl certs and binds port 51820 in the proxy container it also creates.

When trying to set up the cluster in the NetBird GUI the docker-compose that is supplied by the setup wizard conflicts with what the script sets up and wants to bind ports 80 and 443 to the reverse-proxy container which now conflicts with Traefik.

How do I retain authentic certificates to avoid insecure browser warnings within local network but also open ports for the external reverse proxy feature?

This is probably simple for lots of you but I used the Netbird quick start script to set up Netbird in docker on a synology device. I used the default reverse proxy( (Traefik), enabled the proxy service and crowdSec. Now that I have added a routing peer (netbird-client) per the instructions using a setup key whenever a pull a new version of netbird.io/netbird:latest for that container the logs say client/internal/auth fails setup key is invalid. The client appears connected in the interface but the logs give me that error.

Hello,

I am hoping someone can help explain in simple terms how to achieve this and whether it makes sense.

Netbird Reverse Proxy Feature

• Will using this service publicly expose services to the internet allowing anyone that comes across one of the exposed domains an opportunity to attempt a login to that service? The security comes from Netbird only allowing access from approved / configured devices with an active Netbird connection correct?
• If you do not want those domains visible to the public what are your options? I can create networks and policies to expose individual services at their IP:PORT that are only accessible when Netbird connection is active but what if I want to access those services at their reverse proxy domain? Is the only way to publicly expose them?
• Caddy is currently handling reverse proxy responsibilities before I started looking at Netbird. If I were to use Netbird's Reverse Proxy I would have to transition to its built in Traefik option. What happens to reverse proxy resolution when inside my local network? Do I have to keep Netbird active at all times then?

Just trying to make sense of this and how to set it up. I want granular networks and control policies without a lot of complexity or competition from caddy.

Appreciate the help.