@chr i *think* the way to force it if nothing else works is literally just having it all be tunneled in like a vlan or something instead of on the actual web