bingo, I think... had to add grpc_pass netmaker:50051; to the nginx config