ufw is the only thing that makes sense to me.

This makes no fucking sense:

sudo iptables -t nat -A POSTROUTING -s 10.0.0.0/24 -o eth0 -j MASQUERADE