How to configure WAN access of first pfSense to LAN via openvpn of second pfSense?

Question

firewall

Good afternoon!
A test bench is set up in the virtual environment. Version pfSense 2.4.4

It is necessary to publish the PBX through the Wan of the first pfSense, so that the ip addresses of the clients are visible on the PBX, and not the WAN ip address of the first pfSense.
This scheme turned out to be implemented on Mikrotik.
So far, it has turned out to forward the necessary ports to the server, but clients register on the PBX under the ip address 10.10.10.1
Please tell me how you can start traffic between the first pfSense and the PBX so that clients are displayed under their real ip addresses. I think you need to pick NAT, but I don’t understand yet how
Screenshots
of pfSense1

pfSense2 settings

Answer 1

Issue resolved.
Configured via IPsec according to this article https://docs.netgate.com/pfsense/en/latest/vpn/ips...