we must point to public IP