@Gargron Little extra question, for puma:

upstream backend {
server 127.0.0.1:3000 fail_timeout=0;
server externalip:3000 fail_timeout=0;

}

This would also work?
with TRUSTED_PROXY_IP=externalip in the .env.p?