diff --git a/configs/workhorse/nextcloud.nix b/configs/workhorse/nextcloud.nix
index 306b5cd..d04f955 100644
--- a/configs/workhorse/nextcloud.nix
+++ b/configs/workhorse/nextcloud.nix
@@ -1,5 +1,6 @@
 { pkgs, ... }: {
 
+
   # setup nextcloud in a container
   containers.nextcloud = {
     bindMounts = {
@@ -44,6 +45,14 @@
     };
   };
 
+  # give containers internet access
+  networking.nat.enable = true;
+  networking.nat.internalInterfaces = [ "ve-nextcloud" ];
+  networking.nat.externalInterface = "eth0";
+
+  # don't let networkmanager manger container network
+  networking.networkmanager.unmanaged = [ "interface-name:ve-*" ];
+
   # host nginx setup
   services.nginx = {
     enable = true;