fix(apps): keep slow installs visible

core/archipelago/src/api/rpc/package/config.rs

@@ -217,9 +217,9 @@ pub(super) fn get_app_capabilities(app_id: &str) -> Vec<String> {
             "--cap-add=DAC_OVERRIDE".to_string(),
             "--cap-add=NET_BIND_SERVICE".to_string(),
         ],
-        // Nostr VPN and FIPS: mesh networking daemons need TUN + NET_ADMIN
+        // VPN/mesh daemons need TUN + NET_ADMIN.
         // Note: --device=/dev/net/tun is added separately in install.rs
-        "nostr-vpn" | "fips" => vec![
+        "nostr-vpn" | "fips" | "netbird" => vec![
             "--cap-add=NET_ADMIN".to_string(),
             "--cap-add=NET_RAW".to_string(),
         ],
@@ -329,6 +329,7 @@ pub(super) fn get_health_check_args(app_id: &str, _rpc_pass: &str) -> Vec<String
             "3",
         ),
         "nostr-vpn" => ("nvpn status || exit 1", "30s", "3"),
+        "netbird" => ("netbird status || exit 1", "30s", "3"),
         "fips" => ("fipsctl status || exit 1", "30s", "3"),
         _ => return vec![],
     };
@@ -389,6 +390,7 @@ pub(super) fn get_memory_limit(app_id: &str) -> &'static str {
         "nostr-rs-relay" | "nostr-relay" => "256m",
         "routstr" => "512m",
         "nostr-vpn" => "256m",
+        "netbird" => "256m",
         "fips" => "256m",
         "nginx-proxy-manager" => "256m",
         // Databases

core/archipelago/src/api/rpc/package/install.rs

@@ -552,6 +552,7 @@ impl RpcHandler {
             "uptime-kuma"
                 | "gitea"
                 | "tailscale"
+                | "netbird"
                 | "vaultwarden"
                 | "homeassistant"
                 | "home-assistant"
@@ -626,6 +627,10 @@ impl RpcHandler {
             run_args.push("--tmpfs=/tmp:rw,exec,size=256m");
         }
 
+        if package_id == "netbird" {
+            run_args.push("--device=/dev/net/tun:/dev/net/tun");
+        }
+
         // Create data directories (mkdir only — chown happens AFTER config files are written)
         for volume in &volumes {
             if let Some(host_path) = volume.split(':').next() {

core/archipelago/src/container/docker_packages.rs

@@ -281,7 +281,7 @@ fn get_app_tier(app_id: &str) -> &'static str {
         "uptime-kuma" => "recommended",
         "grafana" => "recommended",
         "searxng" => "recommended",
-        "tailscale" => "recommended",
+        "tailscale" | "netbird" => "recommended",
         "portainer" => "recommended",
         // Optional: everything else
         _ => "optional",
@@ -479,6 +479,13 @@ fn get_app_metadata(app_id: &str) -> AppMetadata {
             repo: "https://github.com/tailscale/tailscale".to_string(),
             tier: "",
         },
+        "netbird" => AppMetadata {
+            title: "NetBird".to_string(),
+            description: "WireGuard mesh VPN client for secure remote access".to_string(),
+            icon: "/assets/img/app-icons/netbird.svg".to_string(),
+            repo: "https://github.com/netbirdio/netbird".to_string(),
+            tier: "",
+        },
         "indeedhub" | "indeehub" => AppMetadata {
             title: "IndeedHub".to_string(),
             description: "Decentralized media streaming platform".to_string(),

core/archipelago/src/container/image_versions.rs

@@ -168,6 +168,7 @@ fn image_var_for_app(app_id: &str) -> Option<&'static str> {
         "nginx-proxy-manager" => Some("NPM_IMAGE"),
         "portainer" => Some("PORTAINER_IMAGE"),
         "tailscale" => Some("TAILSCALE_IMAGE"),
+        "netbird" => Some("NETBIRD_IMAGE"),
 
         // Fedimint
         "fedimint" | "fedimintd" => Some("FEDIMINT_IMAGE"),