443 > WAN (opensene) to 443 > Nginx proxy manager (docker on lxc in dmz) > - dashboard.domain.local > netmakerlocalip:8082 (docker on lxc) - api.domain.local > netmakerlocalip:8081 (docker on lxc) - grpc.domain.local > netmakerlocalip:50051 (docker on lxc) UDP ports > WAN (opensense) > netmaker:udp (docker lxc) So 3 devices: the opnsense on the edge, nginx docker in a lxc on proxmox in the DMZ LAN and netmaker in a different (test) lxc also on the dmz lan