fix(apps): keep slow installs visible

core/archipelago/src/api/rpc/package/config.rs

@@ -217,9 +217,9 @@ pub(super) fn get_app_capabilities(app_id: &str) -> Vec<String> {
             "--cap-add=DAC_OVERRIDE".to_string(),
             "--cap-add=NET_BIND_SERVICE".to_string(),
         ],
-        // Nostr VPN and FIPS: mesh networking daemons need TUN + NET_ADMIN
+        // VPN/mesh daemons need TUN + NET_ADMIN.
         // Note: --device=/dev/net/tun is added separately in install.rs
-        "nostr-vpn" | "fips" => vec![
+        "nostr-vpn" | "fips" | "netbird" => vec![
             "--cap-add=NET_ADMIN".to_string(),
             "--cap-add=NET_RAW".to_string(),
         ],
@@ -329,6 +329,7 @@ pub(super) fn get_health_check_args(app_id: &str, _rpc_pass: &str) -> Vec<String
             "3",
         ),
         "nostr-vpn" => ("nvpn status || exit 1", "30s", "3"),
+        "netbird" => ("netbird status || exit 1", "30s", "3"),
         "fips" => ("fipsctl status || exit 1", "30s", "3"),
         _ => return vec![],
     };
@@ -389,6 +390,7 @@ pub(super) fn get_memory_limit(app_id: &str) -> &'static str {
         "nostr-rs-relay" | "nostr-relay" => "256m",
         "routstr" => "512m",
         "nostr-vpn" => "256m",
+        "netbird" => "256m",
         "fips" => "256m",
         "nginx-proxy-manager" => "256m",
         // Databases

core/archipelago/src/api/rpc/package/install.rs

@@ -552,6 +552,7 @@ impl RpcHandler {
             "uptime-kuma"
                 | "gitea"
                 | "tailscale"
+                | "netbird"
                 | "vaultwarden"
                 | "homeassistant"
                 | "home-assistant"
@@ -626,6 +627,10 @@ impl RpcHandler {
             run_args.push("--tmpfs=/tmp:rw,exec,size=256m");
         }
 
+        if package_id == "netbird" {
+            run_args.push("--device=/dev/net/tun:/dev/net/tun");
+        }
+
         // Create data directories (mkdir only — chown happens AFTER config files are written)
         for volume in &volumes {
             if let Some(host_path) = volume.split(':').next() {