Configuration change for HTTPs, SSL

I have my Pi3 up and running with 17.0.2.
I enabled port 80 and 443 on the router and it is working. I figured out how to do the acme challenge and how to issue certificate.
My road block is,

  1. what are the files I need to change to enable HTTPs
  2. where do I inserts the cert keys
  3. how do I point to my domain, what and which config I need to change? The domain and external ip is setup already/


I have in my dockerfile something like this:

FROM nextcloud:17.0.1
COPY ssl-cert-snakeoil.key /etc/ssl/private/ssl-cert-snakeoil.key
COPY ssl-cert-snakeoil.pem /etc/ssl/certs/ssl-cert-snakeoil.pem
COPY default-ssl.conf /etc/apache2/sites-enabled/default-ssl.conf
RUN a2enmod ssl

I copy the files with the certificates to the apach directory and enable the ssl module in apach

And you have add that files to configuration in default-ssl.conf (apache2)
Like that:

            SSLEngine on

            #   A self-signed (snakeoil) certificate can be created by inst$
            #   the ssl-cert package. See
            #   /usr/share/doc/apache2/README.Debian.gz for more info.
            #   If both key and certificate are stored in the same file, on$
            #   SSLCertificateFile directive is needed.
            SSLCertificateFile      /etc/ssl/certs/ssl-cert-snakeoil.pem
            SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key