Double reverse Proxy

[KoMa1012]

I'm using authentik in a private environment mostly for family and friends. I want to hide my public IP (because why not, and I'd rather have something in front that can handle higher traffic). For this I've got a VPS which can act as a reverse proxy and I don't want to open ports on my home router. So currently I'm just forwarding all the traffic via a wireguard tunnel from the VPS to my home network.

Current Setup:
VPS (traffic on port 80 and 443) -wireguard tunnel-> homewserver (SWAG reverse Proxy)
This causes, that obviously every IP my reverse proxy sees is the wireguard IP of my VPS

What I want:
VPS (with SWAG) -> wireguard tunnel -> homewserver (SWAG reverse Proxy)
for this I was following this guide: https://virtualize.link/vps/ However, the Issue is, that it doesn't explain how to deal with authentik and I don't understand enough to adapt it.

Can someone help me find a solution here? I got it working to the point, that it will forward the traffic etc. but I can not use authentic to authenticate to my services. There is an explanation for authelia, but I couldn't even follow this, since the .conf files in swag got updated and it seems to work differently now.

Thank you in advance!