diff --git a/hosts/vps-public/default.nix b/hosts/vps-public/default.nix
index 2bc2917..2729404 100644
--- a/hosts/vps-public/default.nix
+++ b/hosts/vps-public/default.nix
@@ -71,7 +71,12 @@
 
           it-tools = {
             enable = true;
-            domain = "tools.${sproutedDomain}";
+            domain = "it-tools.${sproutedDomain}";
+          };
+
+          networking-toolbox = {
+            enable = true;
+            domain = "net-tools.${sproutedDomain}";
           };
 
           privatebin = {
diff --git a/modules/system/web-services/networking-toolbox.nix b/modules/system/web-services/networking-toolbox.nix
new file mode 100644
index 0000000..96a2e41
--- /dev/null
+++ b/modules/system/web-services/networking-toolbox.nix
@@ -0,0 +1,27 @@
+{ config, lib, ... }:
+let
+  cfg = config.custom.web-services.networking-toolbox;
+in
+{
+  options.custom.web-services.networking-toolbox = {
+    enable = lib.mkEnableOption "";
+    domain = lib.mkOption {
+      type = lib.types.nonEmptyStr;
+      default = "";
+    };
+    port = lib.mkOption {
+      type = lib.types.port;
+      default = 4479;
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
+    virtualisation.oci-containers.containers.networking-toolbox = {
+      image = "lissy93/networking-toolbox";
+      ports = [ "127.0.0.1:${toString cfg.port}:3000" ];
+      pull = "newer";
+    };
+
+    custom.services.caddy.virtualHosts.${cfg.domain}.port = cfg.port;
+  };
+}