diff --git a/modules/system/containers.nix b/modules/system/containers.nix
index a0942f9..5b1376d 100644
--- a/modules/system/containers.nix
+++ b/modules/system/containers.nix
@@ -95,6 +95,11 @@ let
         privateNetwork = lib.mkForce true;
       }
     ) config.settei.containers;
+
+    networking.nat = lib.mkIf (config.settei.containers != { }) {
+      enable = true;
+      internalInterfaces = [ "ve-+" ];
+    };
   };
 
   darwinConfig = lib.optionalAttrs (!isLinux) {