diff --git a/nixos/hosts/framework-server/containers.nix b/nixos/hosts/framework-server/containers.nix
index ba9b1765..89b32aae 100644
--- a/nixos/hosts/framework-server/containers.nix
+++ b/nixos/hosts/framework-server/containers.nix
@@ -8,9 +8,11 @@ in {
   };
 
   networking = {
-    nat.enable = true;
-    nat.internalInterfaces = [ "ve-+" ];
-    nat.externalInterface = lanInterface;
-    firewall.extraCommands = ''iptables -t nat -A POSTROUTING -o ${lanInterface} -j MASQUERADE'';
+    networkmanager.unmanaged = [ "interface-name:ve-*" ];
+    nat = {
+      enable = true;
+      externalInterface = lanInterface;
+      internalInterfaces = [ "ve-+" ];
+    };
   };
 }