So I used my first #IPv6 NAT on #OpenBSD and it worked as intended. This is a local ULA so is never meant to be routed but the control plane does need some access for #NTP, syslog, snmp etc

match out on egress inet6 from (vlan10:network) to any nat-to 2001:db8:d00b:a::1