I just didn’t want people to suggest to me to run a different server OS, as I can’t do that (I think).

Is it a run and just works docker compose file?

Is a Docker volume accessible like a folder if I SSH/SFTP into the host machine, not the container?

Don’t put any data into the container ever. All of your data and configuration should be done in volumes. So are bind mounts (–bind) to the filesystem bad? Am I able to access Docker volumes through SFTP/SSH?

I think that it’s similar to the “Normal VPN without NAT”, but I want it to preserve the client IP all the way through to the server that the client wants to connect to (in other words, the website that the client wants to access will receive the IP of the client, not the VPN server).