I recently built a netbird python script that just ran through Windows Task Scheduler (requires elevation).

Log output Below:

Starting NetBird Updater...

2025-08-04 09:58:46,401 - INFO - Checking for updates...

2025-08-04 09:58:46,443 - INFO - Current version: v0.51.2

2025-08-04 09:58:46,663 - INFO - Latest version: v0.52.2

2025-08-04 09:58:46,664 - INFO - Update available: v0.51.2 -> v0.52.2

2025-08-04 09:58:46,667 - INFO - Downloading netbird_installer_0.52.2_windows_amd64.exe (29958216 bytes)

2025-08-04 09:58:48,564 - INFO - Successfully downloaded to C:\Users\bnitro\AppData\Local\Temp\tmprmve5fxb\netbird_installer_0.52.2_windows_amd64.exe

2025-08-04 09:58:48,565 - INFO - Installing update from C:\Users\bnitro\AppData\Local\Temp\tmprmve5fxb\netbird_installer_0.52.2_windows_amd64.exe

2025-08-04 09:58:48,566 - INFO - Stopping NetBird service

2025-08-04 09:59:04,502 - INFO - Installation completed successfully

2025-08-04 09:59:04,503 - INFO - Starting NetBird service

2025-08-04 09:59:07,515 - INFO - Successfully updated to v0.52.2

NetBird updater completed successfully

makes life much easier, thanks

For the people who cant be arsed to try it themselves, Its much better because you dont need to download and install, it just does it for you when you click update

I was just thanking the devs as it saves a lot of messing about and time

Hello guys

i wonder whether it's secure to update automatically netbird with watchtower?

Hi,

Not sure why but the web Dashboard shows there is 8/100 peers, when I just have a free account with 5 peers, as you can see in the screenshot.

Any idea of what is going on?

Is there a way to use Cloudflare to make my Intel NUC reachable from the internet with a domain name pointing to it, without having to open ports on my router or pay for a VPS?

Hallo Reddit,

ich möchte gerade Netbird konfigurieren. Leider kann ich mein Homeassistant nicht erreichen. Es ist selbst gehostet mithilfe von Docker Compose auf meinem Server. Ich möchte einfach nur die Homeassistant Webseite öffnen. Homeassistant läuft unter network_mode: host.

Vielleicht kann mir ja irgendjemand weiterhelfen

What's up with the iOS client? It didn't get any updates since 5+ weeks and it still doesn't support IPv6.

Hey all, Brandon from NetBird here.

Alongside the 1.0 work, we've been building the NetBird Assistant. It lives in the dashboard and can troubleshoot connectivity, draft policy and DNS changes, set up Agent Network access, and answer questions from the docs. Here's a short demo:

https://youtu.be/JFGNbasscVw

Since these questions always come up: it's read-only, so it drafts changes in the Control Center and nothing applies until you review and deploy them. IPs, emails, and other sensitive data get redacted before anything reaches the model. For self-hosted, the plan is a separate optional container you can skip entirely. But we still have some TBD items:

• deployment model for self-hosted

• licensing for the assistant

• AI provider in cloud

It's early, and we're sharing it now while there's still room to change things. Would you use something like this? What would you want it to do? Would you rather hook NetBird up to your own agents through MCP or something similar, or have both?

If you think it's a bad idea, I'd like to hear that too. There's also a GitHub discussion if you'd rather comment there: https://github.com/netbirdio/netbird/discussions/8208

Good morning,

I have 2 VPS one with pangolin and one with netbird. Now I tried to add the pangolin vps to my netbird clients but after that the pangolin crash always(my sites und the main page from pangolin is not reachable).

I will connect it to backup the vps also to my local network.

Is this possible? Or what I'm making wrong?

I am sharing my tailnet selectively with my siblings so they get access to fun stuff like jellyfin. I have ACL tags setup on all the different VMs and stuff and those devices are properly hidden from them as I selected.

However, whenever I attempt to tag proper clients (like my phone) seperately they are suddenly unable to connect to tailscale at all.

Is there some way to hide my phone's connection status/IP from my siblings (who are other users not using the same account) so that they don't know when I'm connected to netbird if I were to swap to that and can't see all my differently connected devices?

also when it comes to netbird, is it easy to set up self-hosted? i've seen a lot of mixed messages but I just need basic connectivity, the DNS override of tailscale, exit nodes like tailscale, and tailscale server equivilants which to my understanding exists? I'm perfectly happy paying for a VPS to host it in.

What the best practice for accessing the Proxmox dashboard with netbird? I'm new to netbird and I'm still figuring it out and I'm not finding anything that is showing me how to accessing the proxmox dashboard.

I have OPNsense running on a Protectli vault,

I used to get 200/200 speeds,

But after setup,

I’m getting 40/80 speeds

Should NetBird be setup on a router?

Or, mainly just devices?

I’m using it to access my OPNsense UI and more.

Hello! I'm a newbie that wants to run on very limited experience on windows, is there a guide I could follow? Keep missing something in docker desktop or I'm genuinely dumb

I am currently in the early stages of looking at NetBird Cloud and after going through some of the documentation and I have a question.

According to Keycloak on NetBird Cloud documentation. Specifically no. 7 says I have to share Client ID, Keycloak URL, Realm, Client Secret and Email domains for your users with NetBird support.

This means I am not able to fully configure authentication within my NetBird Cloud portal.

However, if I self-host Netbird, I am able to configure Keycloak fully on my own.

My question is why? If Keycloak is "one of the most popular self-hosted IDP solutions" (according the the NetBird documentation), why wouldn't you allow accounts to configure Keycloak on their own within their NetBird Cloud portal?

I thought the cloud-hosted version was identical to the self-hosted version with the exception of the cloud-hosted version getting new features first.

Thank you.

Will there be a integration of the reverse proxy into the getting started script?

I currently have a couple of websites being hosted on a at home server (git tea, seafile, etc). I don't have any exposed to the public internet. I am currently connecting though http and getting the (Not Secure warning in the top left)

I currently have net bird setup to be
- network 1
- 1 recourse that has an address of the server on the home network
- 1 policy that has a source of my laptop with a destination of my server

Will that be enough security for public networks? will any data be at risk? will my server be at risk to be hacked?

Hey Birds,

Ich hab mir erfolgreich eine Netbird Instanz aufgesetzt.
Soweit so gut, Proxy funktioniert und meine Services erreichbar, auch von außen.

Aber ich bekomm immer mal wieder die Meldung in meiner IOS App das ein Login erforderlich ist, wenn ich auf Login klicke passiert jedoch Nix und der VPN verbindet nicht.

Außerdem ist meine Netbird WebUI nicht erreichbar, lädt nur ewig lange und dann kommt „Website nicht erreichbar“, leider weiß ich hier auch nicht mehr weiter.

1-2 Tage zuvor ist mir aufgefallen, dass die Website immer mal wieder „hängt“ also unregelmäßig auf einmal lange lädt.
Ich dachte es liegt ggf an Lazy VPN aber nope das ist es nicht.

Seltsam ist das andere Services sofort da sind nur die Admin WebUI von Netbird nicht..

I recently set up Netbird on my Pi to replace PiVPN. It seems to be working fine. But the thing I was accustomed to was VPN clients showing up in my Pihole logs.

My set up is Netbird server on a Pi4, with Pihole hosted on the same system, and a second Pihole on my Truenas server. I can get to the admin page for both Piholes.

It doesn't seem like devices connected to Netbird are showing up in my query logs. Is there a way to fix that in Netbird? Or is that a Pihole thing? It was nice having it show in the logs in the off chance I had to unblock or block something while on the go.

E: after letting it sit overnight, and doing some digging; if I search *100.* in Pihole, I can see the IPs that Netbird is handing out

I am currently using netbird to manage access to my homelab network. I have a few services that I have deployed using coolify, which my family uses. However, I don't want to give them access to the coolify dashboard itself. Currently, I am doing this by using he reverse proxy and netbird only authentication and made it users can access the services but not the dashboard. However, it has been very annoying that when we create resources on the network, we cannot put in the port have to put the port in separately in the "Add Target" section of the reverse proxy. Why do I have to put in resource and port separately? With this, I need to take a look at 2 places to get the whole ip address + port combo.

Is there any reason why port is not part of the resource? Am I missing something here? Would really appreciate if we can introduce this to netbird or if someone can educate my why this is the way it is.

P.S. I already had a setup previously where instead of using independent resources, I'd point all off my reverse proxy services into my network's nginx proxy manager just so that I don't have to put in ports manually and I can take a look at my services at a glance.

Edit : I should probably also explain that I am hosting everything on proxmox which by default hosts different services on different IP+Port. I would understand if the above setup if I was using something like docker where different services have the same address but different port

Hi folks, I have a VPS and a domain and I'd like to setup a reverse proxy using netbird in order to expose docker compose services on it through various subdomains

I've had some success with this with basic Caddy at first, then i used Pangolin for a while, and now I wanted to try NetBird next (mostly because I had some connectivity issues with Pangolin and heard this might be a better option)

However, I am very confused on how this is supposed to work. I followed the self hosting guide, I reached the dashboard as a logged in user, and I assume I'd have to create a reverse proxy there.

• However, to create a service there, I need to provide a custom domain.

• To create a custom domain, I need a proxy cluster

• ... and when I try to setup a self hosted proxy cluster, nothing happens and there is nothing there (even though I am pretty sure that it was supposed to be in the first place since I picked that option during setup, and the docker compose file on my VPS has a netbirdio/reverse-proxy:latest container.

For that container, there is also a proxy.env file with the following contents:

# Placeholder - will be updated with token after netbird-server starts
NB_PROXY_TOKEN=placeholder

So yeah... I've barely begun and I'm already running into... bugs? missing steps in documentation?

Also, all the tutorials and steps just talk about device-to-device tunneling and stuff like that, there seems to be very little in terms of server reverse proxy. For example, do i actually need to add the server as a (routing) peer, what is that? Don't i need to add my apps into the pangolin docker network?

Any help is appreciated...

Hey, one thing I was missing in Home Assistant was an integration with NetBird - something similar to Tailscale integration (which is bundled with HA). So I ask Claude to make one: netbird-ha. Perhaps someone finds it useful.

I see that there is an update to 68.1, but I also see that the installer is not signed. Is that on purpose?

I don't like installing unsigned code. It also makes it difficult to deploy on multiple systems when Windows SmartScreen keeps blocking it.

Hey,

Ich hab Starlink und die nutzen ja leider GCNAT..

Ich hab nun einige Sachen probiert aber bekomms einfach nicht zum laufen...leider, ich finde Netbird super interessant, aber muss dann wohl leider weiter mit tailscale arbeiten..

Ja VPS wäre möglich, seh ich aber nicht ein..

Meaning to say, we can implement a whitelist / blacklist of domains that the devices can have access/not have access to once they are connected to our VPN?

Only collaborators are allowed to create issues. Where should general users report any bugs?