WireGuard VPN required
This service only answers on the VPN address 10.10.1.1, while keeping the name access.amora.dev.
Your WireGuard DNS must be 10.10.1.1. If DNS still returns the public IP, the browser never enters the tunnel.
Checking VPN…
VPN is up, but this page is still the public gate — DNS is wrong.
On the client, either set WireGuard DNS = 10.10.1.1, or:
echo '10.10.1.1 access.amora.dev' | sudo tee -a /etc/hosts # then reload this tab
Quick check: dig +short access.amora.dev should print 10.10.1.1.