this is how the WOPI protocol works - both system must be accessible from the client and have valid TLS certificates.
as long your Nextcloud is public Collabora must be as well. Please review Collabora Integration guide for details.
no valid (public) TLS certificate can be issued for an IP address 