@Gargron Little extra question, for puma:

upstream backend {
server 127.0.0.1:3000
server externalip:3000
fail_timeout=0;
}

This would also work?
with TRUSTED_PROXY_IP=externalip in the .env.p?