Ubuntu, k3s, and Airvpn Suite

[Titums 3]

I've got an Ubuntu 24 server hosting a k3s node.  The node mostly servers local media services.  There is one website exposed externally via a cloud flair tunnel pod.  This all works and is great.  

I'd like to have airvpn up and running and guarding FireFox and BiglyBT traffic (installed on host os).  When I activate network lock through bluetit, any pod that doesn't use hostnetwork:true is no longer accessible.  They are running, but I just can't get to them.  I've spent a lot of time with Claude and can't get it working right.

Is it even possible to get this working?
Is there another/better way to get this working that would be better?