My problem was solved with an official not self signed certificate.You have to route port 80 and 443 to the nethserver and install a letsencrypt certificate.
This was my problem without the letsencrypt certificate, the installation from @mrmarkuz with letsencrypt and routed ports 80 and 443 worked fine.