@User if public IP is working stick with that. You need to restart the server with the correct IP under env vars (COREDNS_IP), and with the correct port mapping (which appeared to work with your private address so use that). Once that is done, any token you generate will contain the correct IP. However, existing nodes won't receive the update. For this, you need to update the netconfig (under /etc/netclient)