diff --git a/ansible/roles/tailscale_serve/defaults/main.yml b/ansible/roles/tailscale_serve/defaults/main.yml
index a7b437f..e9c5970 100644
--- a/ansible/roles/tailscale_serve/defaults/main.yml
+++ b/ansible/roles/tailscale_serve/defaults/main.yml
@@ -24,9 +24,8 @@ tailscale_serve_services:
       upstream: http://localhost:5050
 
   # Kubernetes API server (TCP passthrough for mTLS)
-  # NOTE: Port is dynamic with podman driver - check with:
-  #   ssh indri "kubectl config view --minify -o jsonpath='{.clusters[0].cluster.server}'"
+  # With qemu2 driver, API server is inside VM at 192.168.105.2:6443
   - name: svc:k8s
     tcp:
       port: 443
-      upstream: tcp://localhost:44491
+      upstream: tcp://192.168.105.2:6443