Wireguard -> OPNsense -> nginx plugin -> internal server with self signed certs

[Jonasmedj]

Hello people!

As stated in the subject above, I'm trying to setup a service with Wireguard as my main entrypoint, which transfers to OPNsense, which is then directed by the nginx plugin, allowing for domain name input, instead of using a port number. My issue is that I can't make it work successfully. Right now I'm testing only on the LAN side of things, and not via the Wireguard/WAN interface, as I also want certain machines on my LAN to have access to the server.

The server my users are going to access via a self signed certificate is located on 10.10.215.250, and are using 3 ports, 8443, 8089 and 8447.

I want to setup an XMPP server as well, which is using port 5222 for user input.

My OPNsense firewall is located on 10.10.215.252

Also - I'm using Unbound DNS on my OPNsense firewall, to name my server

Does anyone have any documentation on where to begin with setting up such a service? I seem to be at my limits when trying to search for nginx LAN port directing.