PAT rule not working

[NoncarbonatedClack]

I've got a PAT rule that I can't seem to get working, verified via pcaps.

I've got a VM running rootless podman in a separate VLAN. OPNsense is routing between VLANs for me.
I don't want to give my reverse proxy container privileges to bind on ports 80 and 443, so I'd like to use OPNsense to redirect traffic destined for 80 and 443 to ports 8084 and 8443 respectively, however the PAT rule I've created is not working.

Attached are screenshots of the rules.

Does anyone see anything immediately incorrect?