Describe the problem
I am following the official selfhosting with Authentik guide step by step
And at the step where I have to visit the just exposed service, I get stuck.
I am unsure on what additional logs/info I can provide to help solve this.
To Reproduce
I have created an unprivileged LXC, setup Cloudflare DNS, exposed the required ports.
When installing docker I did ran into this issue: https://github.com/russmorefield/lxc-docker-fix
And after fixing I had to redo the install script, but I am unsure if this has anything to do with it.
I setup authentik on local server_ip:9000, created the netbird network and routes etc.
When I try to visit the service that I exposed, it just goes to a page not loading anything.
NetBird version
Management v0.67.0
Dashboard v2.36.0
Is any other VPN software installed?
I have disabled VPN’s and checked on a different device to be sure.
Debug output
Peers detail:
proxy-xxxx.netbird.selfhosted:
NetBird IP: 100.74.x.x
Public key: PUBLIC_KEY_REDACTED
Status: Connected
-- detail --
Connection type: Relayed
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address: rels://example.domain.tld:443
Last connection update: 18 minutes ago
Last WireGuard handshake: 28 seconds ago
Transfer status (received/sent) 27.2 KiB/2.7 KiB
Quantum resistance: false
Networks: -
Latency: 0s
Events:
[INFO] SYSTEM (uuid-redacted)
Message: Network map updated
Time: 21 minutes ago
OS: linux/amd64
Daemon version: 0.67.0
CLI version: 0.67.0
Profile: default
Management: Connected to https://example.domain.tld:443
Signal: Connected to https://example.domain.tld:443
Relays:
[stun:example.domain.tld:3478] is Available
[rels://example.domain.tld:443] is Available
Nameservers:
FQDN: netbird-services.netbird.selfhosted
NetBird IP: 100.74.x.x/16
Interface type: Kernel
Quantum resistance: false
Lazy connection: false
SSH Server: Disabled
Networks: -
Peers count: 1/1 Connected
Additional context
I have done a clean install and tried out the PocketID setup aswell, but same issue
I have also tried this:
And after doing so this are my filtered outputs of the server are this:
2026-03-25T21:51:16.296Z INFO management/internals/server/boot.go:202: One-time token store initialized for proxy authentication
2026-03-25T21:51:16.296Z INFO management/internals/server/boot.go:164: ProxyService registered on gRPC server
2026-03-25T21:51:17.500Z INFO management/internals/shared/grpc/proxy.go:157: New proxy connection from DOCKER_INTERNAL_IP
2026-03-25T21:51:17.509Z INFO [proxyID: proxy-instance-id, clusterAddress: example.domain.tld, ipAddress: DOCKER_INTERNAL_IP, context: GRPC, requestID: request-id] management/internals/modules/reverseproxy/proxy/manager/manager.go:62: proxy connected
2026-03-25T21:51:17.509Z INFO [proxy_id: proxy-instance-id, address: example.domain.tld, cluster_addr: example.domain.tld, total_proxies: 1] management/internals/shared/grpc/proxy.go:195: Proxy registered in cluster
2026-03-25T21:51:22.821Z INFO management/internals/shared/grpc/onetime_token.go:128: Token validated and consumed for proxy proxy-service-id in account account-id
2026-03-25T21:51:23.024Z INFO [service_id: proxy-service-id, account_id: account-id] management/internals/shared/grpc/proxy.go:725: Certificate issued timestamp updated
2026-03-25T21:51:23.024Z INFO [service_id: proxy-service-id, account_id: account-id, status: active] management/internals/shared/grpc/proxy.go:732: Service status updated
Have you tried these troubleshooting steps?
- Checked for newer NetBird versions
- Searched for similar issues on GitHub (including closed ones)
- Restarted the NetBird client
- Disabled other VPN software
- Checked firewall settings