SSL certificate for NGINX reverse proxy website?

For LE, either web validation or DNS validation is required to verify domain ownership:

  • HTTP/web validation: the domain must resolve and serve the challenge file over the web (i.e., using the public_html directory).
  • DNS validation: a specific TXT record must be created and publicly visible (this can work if Virtualmin manages your DNS).

There’s no other way to handle it.