Hukot: { # There will be every port forwarded to the entry server except for one, # that will server as ssh server for this server itself vps: { wireguard-server mail-server } } Physical { Home-Server: { entry-server: { wireguard-client } tob-backup k3s-cluster: { MetalLB Worker node 1 Worker node 2 Worker node 3 MetalLB -> Worker node 1 MetalLB -> Worker node 2 MetalLB -> Worker node 3 } entry-server -> k8s-cluster.MetalLB } RPI { tailscale-proxy WoL } _.Hukot.vps.wireguard-server <-> Home-Server.entry-server.wireguard-client: Wireguard tunnel }