Letsencrypt noip.me problems

Nextcloud 20.0.0
Raspberry Pi4 (4gb) Raspbian buster (all up to date)
Apache
PHP 7.3

I installed nextcloud fine, it sits in /var/www/html/nextcloud
On the overview I had a few warnings, some of which I cleared fairly easily.
However, these are driving me nuts.

You are accessing your instance over a secure connection, however your instance is generating insecure URLs. This most likely means that you are behind a reverse proxy and the overwrite config variables are not set correctly. Please read the documentation page about this.

Accessing site insecurely via HTTP. You are strongly advised to set up your server to require HTTPS instead, as described in the security tips :arrow_upper_right:.

I read the documentation and it looked like I need an SSL certificate, so went with the free letsencrypt method.

Had to install snap, but it seemed to go well.
$ sudo certbot certificates


Found the following certs:
Certificate Name: revjim.noip.me
Serial Number: (bunch of numbers)
Key Type: RSA
Domains: revjim.noip.me
Expiry Date: 2021-06-19 12:44:31+00:00 (VALID: 89 days)
Certificate Path: /etc/letsencrypt/live/revjim.noip.me/fullchain.pem
Private Key Path: /etc/letsencrypt/live/revjim.noip.me/privkey.pem


BUT
$ apachectl -S
AH00526: Syntax error on line 34 of /etc/apache2/sites-enabled/000-default-le-ssl.conf:
SSLCertificateFile: file ‘/etc/letsencrypt/live/revjim.noip.me/fullchain.pem’ does not exist or is empty
Action ‘-S’ failed.
The Apache error log may have more information.

I restarted Apache, rebooted with no effect. The file exists and is not empty!

I have no idea where to go now.

The output of your Nextcloud log in Admin > Logging:

Fatal	no app in context	Error: Call to undefined method OC\AllConfig::isGlobalScaleEnabled()
/var/www/html/nextcloud/apps/richdocuments/lib/AppInfo/Application.php - line 154:

OCA\Richdocuments\AppInfo\Application->updateCSP("*** sensiti ... *")

/var/www/html/nextcloud/lib/private/AppFramework/Bootstrap/FunctionInjector.php - line 68:

OCA\Richdocuments\AppInfo\Application->OCA\Richdocuments\AppInfo\{closure}("*** sensiti ... *")

/var/www/html/nextcloud/lib/private/AppFramework/Bootstrap/BootContext.php - line 52:

OC\AppFramework\Bootstrap\FunctionInjector->injectFn(Closure {})

/var/www/html/nextcloud/apps/richdocuments/lib/AppInfo/Application.php - line 156:

OC\AppFramework\Bootstrap\BootContext->injectFn(Closure {})

/var/www/html/nextcloud/lib/private/AppFramework/Bootstrap/Coordinator.php - line 176:

OCA\Richdocuments\AppInfo\Application->boot(OC\AppFramew ... {})

/var/www/html/nextcloud/lib/private/legacy/OC_App.php - line 197:

OC\AppFramework\Bootstrap\Coordinator->bootApp("richdocuments")

/var/www/html/nextcloud/lib/private/legacy/OC_App.php - line 137:

OC_App::loadApp("richdocuments")

/var/www/html/nextcloud/apps/dav/lib/AppInfo/Application.php - line 124:

OC_App::loadApps([ "dav"])

/var/www/html/nextcloud/lib/private/AppFramework/Bootstrap/Coordinator.php - line 176:

OCA\DAV\AppInfo\Application->boot(OC\AppFramew ... {})

/var/www/html/nextcloud/lib/private/legacy/OC_App.php - line 197:

OC\AppFramework\Bootstrap\Coordinator->bootApp("dav")

/var/www/html/nextcloud/lib/private/legacy/OC_App.php - line 137:

OC_App::loadApp("dav")

/var/www/html/nextcloud/lib/base.php - line 979:

OC_App::loadApps()

/var/www/html/nextcloud/index.php - line 37:

OC::handleRequest()

The output of your config.php file in /path/to/nextcloud (make sure you remove any identifiable information!):

<?php
$CONFIG = array (
  'instanceid' => 'removed',
  'passwordsalt' => 'removed',
  'secret' => 'removed',
  'trusted_domains' => 
  array (
    0 => '192.168.1.21',
  ),
  'default_phone_region' => 'GB',
  'datadirectory' => '/var/www/html/nextcloud/data',
  'dbtype' => 'mysql',
  'version' => '21.0.0.18',
  'overwrite.cli.url' => 'http://192.168.1.21/nextcloud',
  'dbname' => 'nextcloud',
  'dbhost' => 'localhost',
  'dbport' => '',
  'dbtableprefix' => 'oc_',
  'mysql.utf8mb4' => true,
  'dbuser' => 'nextcloud',
  'dbpassword' => 'removed',
  'installed' => true,
  'memcache.local' => '\\OC\\Memcache\\APCu',
  'mail_smtpmode' => 'smtp',
  'mail_smtpsecure' => 'ssl',
  'mail_sendmailmode' => 'smtp',
  'mail_from_address' => 'removed',
  'mail_domain' => 'removed',
  'mail_smtpauthtype' => 'LOGIN',
  'mail_smtpauth' => 1,
  'mail_smtphost' => 'smtp',
  'mail_smtpport' => '465',
  'mail_smtpname' => 'removed',
  'mail_smtppassword' => 'removed',
);

The output of your Apache/nginx/system log in /var/log/____:

AH00558: apache2: Could not reliably determine the server's fully qualified domain name, using 127.0.1.1. Set the 'ServerNa$
[Sun Mar 21 14:01:08.237246 2021] [mpm_prefork:notice] [pid 2537] AH00163: Apache/2.4.38 (Raspbian) OpenSSL/1.1.1d configur$
[Sun Mar 21 14:01:08.237344 2021] [core:notice] [pid 2537] AH00094: Command line: '/usr/sbin/apache2'
[Sun Mar 21 14:01:29.809828 2021] [access_compat:error] [pid 2715] [client 192.168.1.10:46694] AH01797: client denied by se$
[Sun Mar 21 14:22:06.029975 2021] [access_compat:error] [pid 2713] [client 192.168.1.10:46990] AH01797: client denied by se$