diff --git a/memory/persistent.md b/memory/persistent.md
index 0fa66d8..e4c5270 100644
--- a/memory/persistent.md
+++ b/memory/persistent.md
@@ -7,7 +7,7 @@ Last updated: 2026-04-30
 
 ## Infrastructure decisions
 - RustDesk is self-hosted on 172.27.40.3 — clients connect to local server not public relay
-- Netbird client management is on port 8443 via Caddy sidecar, NOT port 443
+- Netbird signal+management both route through NPM on port 443 — exposedAddress in /opt/stacks/netbird/config.yaml must be https://netbird.nxm.co.za:443 (caddy-netbird on :8443 exists but is not used externally)
 - Headscale v0.28: all write operations require numeric user ID, not username
 - Tailscale on Windows overrides DNS — disconnect before testing split DNS changes
 - Servers running Tailscale must run `sudo tailscale set --accept-dns=false` before joining Netbird