Maybe give cloudflared a try. Works for me even with nextcloud’s ssl. Couldn’t get it to work with NPM (I admittedly don’t know much about nginx) so I brought in the big gun(s).