VPN

Internal services (Headlamp, the Kubernetes API, databases, …) are only reachable over the NetBird VPN. NetBird is a WireGuard-based mesh VPN: you sign in with your Pub Invest account and it routes only internal traffic through the tunnel; normal internet traffic goes direct.

Guide	For
Setup	Installing the client and connecting the first time
Using the VPN	Day-to-day: connecting, what you can reach
Troubleshooting	When it won't connect or a service doesn't load