xray-core container with mikrotik network question

[kdsystem]

Hello
I have the xray-core container in my local network with mikrotik router:
here is the config.json:
{
"inbounds": [
{
"tag": "tproxy-in",
"listen": "0.0.0.0",
"port": 12345,
"protocol": "dokodemo-door",
"settings": {
"network": "tcp,udp",
"followRedirect": true
},
"streamSettings": {
"sockopt": {
"tproxy": "tproxy"
}
},
"sniffing": {
"enabled": true,
"destOverride": ["http", "tls", "quic", "fakedns"]
}
},
{
"tag": "http-in",
"listen": "127.0.0.1",
"port": 8080,
"protocol": "http",
"settings": {
"timeout": 300,
"allowTransparent": false
},
"sniffing": {
"enabled": true,
"destOverride": ["http", "tls"]
}
},
{
"tag": "socks-in",
"listen": "127.0.0.1",
"port": 10808,
"protocol": "socks",
"settings": {
"auth": "noauth",
"udp": true,
"ip": "127.0.0.1"
},
"sniffing": {
"enabled": true,
"destOverride": ["http", "tls", "fakedns"]
}
}
],
"outbounds": [
{
"protocol": "vless",
"tag": "proxy",
"settings": {
"vnext": [
{
"address": "my_VPS_ip_address",
"port": 38620,
"users": [
{
"id": "ID",
"flow": "xtls-rprx-vision",
"encryption": "none"
}
]
}
]
},
"streamSettings": {
"network": "tcp",
"security": "reality",
"realitySettings": {
"fingerprint": "chrome",
"serverName": "yahoo.com",
"publicKey": "pubKEY",
"shortId": "shortID"
},
"sockopt": {
"mark": 2
}
}
}
],
"routing": {
"domainStrategy": "AsIs",
"domainMatcher": "hybrid",
"rules": [
{
"type": "field",
"inboundTag": ["tproxy-in", "http-in", "socks-in"],
"outboundTag": "proxy"
}
]
}
}

Please let me know - what I need to do with my router in addition to:
#container address is 192.168.1.15
#social_media_list is the address list with targets (youtube for example)

/routing table add name=via-vpn fib
/ip firewall mangle add chain=prerouting src-address=192.168.1.0/24 dst-address-list=social_media_list action=mark-routing new-routing-mark=via-vpn passthrough=no
/ip firewall mangle add chain=output dst-address-list=social_media_list action=mark-routing new-routing-mark=via-vpn passthrough=no
/ip route add dst-address=0.0.0.0/0 gateway=192.168.1.15 routing-table=via-vpn
/ip firewall nat add chain=srcnat src-address=192.168.1.0/24 dst-address-list=social_media_list action=masquerade
/ip firewall nat add chain=dstnat dst-address-list=social_media_list protocol=tcp action=dst-nat to-addresses=192.168.1.15 to-ports=12345
/ip firewall nat add chain=dstnat dst-address-list=social_media_list protocol=udp action=dst-nat to-addresses=192.168.1.15 to-ports=12345