Whether I try the config from Spaceinvader or the LSIO config, I cant reach bitwarden over letsencrypt reverse proxy, it just shows the default letsencrypt page "The website is currently being setup under this address." etc. In the LSIO file I exchanged ALL locations to
set $upstream_app bitwardenrc;
set $upstream_port 8086;
of course, also tried with port 80.
Both letsencrypt as well as bitwardenrc are running on a custom net `localproxy`, the port passed to bitwardenrc is 8086, I can reach bitwardenrc over [serverip]:8086 just fine, other containers work just fine reverse-proxied by letsencrypt (i.e. gitlab, code-server).
The one thing that doesnt work with other containers either is having them either on localproxy or on the macvlan driver (br0) with independent ip and using letsencrypt to forward to them. So this option, which is suggested in the file from spaceinvader, doesnt work either.