Hello!
I also stuck with the same problem.
I have a dedicated server with 1 public IP. On the server i've got a couple VM and CT with OpenVPN.
After a couple of days I've found a solution.
Assume that you have an external interface:
auto eth0
iface eth0 inet static
address 2.15.15.15/24...