Appwrite behind NAT

Hello, anyone have an best practice how to deploy Appwrite behind NAT

This my infrastructure flow

vm (local ip address) -> nginx reverse proxy (setup domain) -> cloudflare (set A record to public ip address)

The question how can I done with function domain?

What's the problem?

My Appwrite can't be acces.

The most important things are to make sure traffic that hits Appwrite is https has the host header set

This the settings of proxy

And not using SSL for the proxy

And this setup for the cloudflare

Is NPM running in a docker container?

How can I check this?

How'd you set up NPM?

Node Package Manager?

Nginx proxy manager

Owh, no. Nginx Proxy Manager is running in other VM. Which is one segment with the Appwrite..

Owh, but Nginx Proxy Manager default is running inside docker

This the docker-compose of the NPM

version: '3.8'
services:
  app:
    image: 'jc21/nginx-proxy-manager:latest'
    restart: unless-stopped
    network_mode: "host"
    ports:
      - '80:80'
      - '81:81'
      - '443:443'
    volumes:
      - ./data:/data
      - ./letsencrypt:/etc/letsencrypt

Oh so NPM and Appwrite are on different servers?

Yes

I was generate for new SSL with docker compose exec appwrite ssl but nothing happend. This the logs.

If I check the certificate, this use traefik default cert.