Another IPSec tunneling question, this time with NAT!

Here's a simplified topology:
(laptop) -private subnet- (home server) - internet - (offsite server)

I used an ipsec policy to encapsulate all the traffic between home server
and offsite server and it works just peachy. Solved all the pesky problems
with replicating when my ISP was blocking ports I wanted.

The problem now is that while NAT on home server works just fine, it
apparently doesn't encapsulate any traffic it translates. So now laptop is
unable to talk to offsite server. I'm loath to replicate my ipsec profile
on all my client computers. Is there any other way around it? I think the
problem is just that home server doesn't think to encapsulate translated
traffic, since it doesn't think it's from itself, while offsite server sees
it as coming from home server and rejects it because it's not encapsulated.

--
Jordan Mills