This message was deleted.

we just use

ingress-nginx

on the box+VM and

"use-forwarded-headers": "true"

on the VM and it works.

cloudflared

on the VM is also a "simpler" option if viable

Thanks, I ended up going with setting up Caddy on another server that then modifies the headers to add the real client IP then forward to the Harvester load balancer.