Rspamd link in email-Filter shows "Forbidden", works with IP in address

Hello,
I am finally trying the manual migration from NS7 to NS8.
It might be a dump question but I’m completely lost at this:
When I am in NS8 Backend - Mail - Filter and try to click the »Rspamd open« button, a new tab opens saying:

Forbidden
You don't have permission to access this resource.
Apache/2.4.61 (Debian) Server at nethserver8.hinz.loc Port 80

Address in addressline is: https://nethserver8.hinz.loc/rspamd/
When I change the address to the actual IP it works:
https://192.168.11.160/rspamd/
The whole backend works ok at https://nethserver8.hinz.loc/cluster-admin

I looks as if I am connecting a different server, “(Debian)” confuses me, but when I look at the certificate it’s common name is “host-05003.ns8.test”, there is actually no other ns8 server running here.

I might be a hint that due to network misconfiguration I had a DHCP-IP 11.84 AND a static IP 11.160, but I removed the dhcp IP and rebooted.

resolv.conf shows my internal domain name “hinz.loc” and internal DNS-Server

nslookup nethserver8.hinz.loc (both Client and NS8 Server)
Name:    nethserver8.hinz.loc
Address:  192.168.11.160

ip addr
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
    link/ether 00:15:5d:0b:ea:0d brd ff:ff:ff:ff:ff:ff
    inet 192.168.11.160/24 brd 192.168.11.255 scope global noprefixroute eth0
       valid_lft forever preferred_lft forever
    inet6 fe80::215:5dff:fe0b:ea0d/64 scope link noprefixroute
       valid_lft forever preferred_lft forever

Startet NS8 Installation from scratch, installed Modules: mail, roundcubemail, imapsync, nothing else
The installation is still in preparation state, everything internal in LAN, no connection from internet (but of course outgoing to internet)

How can I configure the rspamd webserver to answer on https://nethserver8.hinz.loc/rspamd/?

NethServer Version: newest NS8
Module: mail - Filter
OS: “Rocky Linux 9.4 (Blue Onyx)”
Hardware: Hyper-V 2019 Vm (if that does matter)

In Traefik Log it looks like the roundcube Webpage is blocking this rspamd access

2024-10-11T09:06:26+02:00 [1:traefik1:traefik] 192.168.11.11 - - [11/Oct/2024:07:06:26 +0000] "GET /rspamd/ HTTP/2.0" 403 285 "-" "-" 1118 "roundcubemail1-https@file" "http://127.0.0.1:20012" 2ms

Maybe similar to (/rspamd/ not found - #6 by davidep)