I have only one internal server which is coincidentally also accessible from the public Internet. I use NAT hairpinning for the external interface of my router

I have only one internal server which is coincidentally also accessible from the public Internet. I use NAT hairpinning for the external interface of my router and forward all packages on ports 22 and 443 to my server, so its TLS certificate is also valid from inside my LAN.