I also use the nextcloud-snap installation (and it works really great!) only internally (not connected to the internet).
As a solution for the frequent certificate renewal (and the necessary confirmations on ALL devices), I created a certificate that lasts for 10 years. I described what I did, a few minutes ago, here: