diff --git a/k8s/infra/auth/keycloak/http-route.yaml b/k8s/infra/auth/keycloak/http-route.yaml
index 32030c3..65a68e5 100644
--- a/k8s/infra/auth/keycloak/http-route.yaml
+++ b/k8s/infra/auth/keycloak/http-route.yaml
@@ -17,9 +17,6 @@ spec:
         - path:
             type: PathPrefix
             value: /resources
-        - path:
-            type: PathPrefix
-            value: /admin/realms/homelab/users/count
       backendRefs:
         - name: keycloak
           port: 80
diff --git a/k8s/infra/vpn/netbird/backend/kustomization.yaml b/k8s/infra/vpn/netbird/backend/kustomization.yaml
index 40329f8..1c95899 100644
--- a/k8s/infra/vpn/netbird/backend/kustomization.yaml
+++ b/k8s/infra/vpn/netbird/backend/kustomization.yaml
@@ -14,6 +14,7 @@ helmCharts:
     valuesFile: values.yaml
 
 patches:
+  - path: patches/dns-management.yaml # resolve auth admin-endpoint to internal gateway
   - path: patches/deployment-strategy-management.yaml
   - path: patches/deployment-strategy-signal.yaml
   - path: patches/pvc-backend-management.yaml
diff --git a/k8s/infra/vpn/netbird/backend/patches/dns-management.yaml b/k8s/infra/vpn/netbird/backend/patches/dns-management.yaml
new file mode 100644
index 0000000..ebfcc98
--- /dev/null
+++ b/k8s/infra/vpn/netbird/backend/patches/dns-management.yaml
@@ -0,0 +1,11 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: netbird-backend-management
+spec:
+  template:
+    spec:
+      dnsConfig:
+        nameservers:
+          - 192.168.1.253 # AdGuardHome
+      dnsPolicy: None