I wrote about this pretty recently, but the short version is a mix of NixOS and a k3s-based Kubernetes cluster using Tailscale to connect everything together.

https://gabrielsimmer.com/blog/infrastructure-megaupdate