Traffic flow from VPS to Tailscale-protected K3s cluster

Expose K3s Services from a Tailscale-Protected Homelab via a VPS

During my last homelabbing session, I ran into a problem that initially felt annoying but eventually turned into a surprisingly elegant solution—one worth sharing. The Problem I run a private server in my apartment hosting various homelab services. By design, this server is not directly accessible from the public internet. I want to keep my internal services private and under my control. For remote access while traveling, I rely on Tailscale. This allows me to securely access services like paperless-ngx from my phone or laptop without exposing anything publicly. So far, this setup has worked flawlessly. ...

December 21, 2025 · 3 min