Redirect TCP traffic to a box behind NAT with Wireguard
We have a web server on a box without direct access from the internet (e.g. behind a CGNAT). We want to use a box with a public IP address (such as a cheap VPS) as a gateway that will redirect HTTP traffic to the web server. We will setup a Wireguard VPN to enable bidirectional traffic between both boxes, as well as a few routing/NAT rules to redirect HTTP traffic.
Install Wireguard and wg-quick on both boxes: https://www.wireguard.com/install/