that exit node will essentially need to work as a router, connected to both the tailnet and whatever other VPN peer you are working with. you could also use something like a gluetun container as I think it works with a wide variety of popular VPN providers.