Iirc this will cause issues, as letsencrypt requires nextcloud to be reachable via port 80 for autorenew