afaik ceertbot requires port 80 and 443 to point to nextcloud, if 443 points to truenas ui this could cause problems. however, if you map port 443 on your router to port 8282 on your NAS device, this should work i think. otherwise LetsEncrypt certificate creation will fail.