Confused Reverse proxy and vaultwarden

Of course!

Just open tcp port 8001

and then from config file vaulwarden.env just modify the var:

ROCKET_TLS={certs="/etc/letsencrypt/live/yoururl.ddns.net/cert.pem",key="/etc/letsencrypt/live/yoururl.ddns.net/privkey.pem"}