Update: I managed to run it on my domain with http://www.domain.com, but when I run ghost config url https://www.domain.com the site crashes and returns “refused to connect”.

I also run ghost setup ssl but it throws an error (domain.com here is just a placeholder):

✖ Setting up SSL
One or more errors occurred.

1) ProcessError

Message: Command failed: /bin/sh -c sudo -S -p '#node-sudo-passwd#'  /etc/letsencrypt/acme.sh --issue --home /etc/letsencrypt --server letsencrypt --domain www.domain.com --webroot /var/www/ghost/system/nginx-root --reloadcmd "nginx -s reload" --accountemail mail@gmail.com
[Mon Nov 29 17:22:46 UTC 2021] www.domain.com:Verify error:DNS problem: SERVFAIL looking up CAA for domain.com - the domain's nameservers may be malfunctioning
[Mon Nov 29 17:22:46 UTC 2021] Please add '--debug' or '--log' to check more details.
[Mon Nov 29 17:22:46 UTC 2021] See: https://github.com/acmesh-official/acme.sh/wiki/How-to-debug-acme.sh

[Mon Nov 29 17:22:41 UTC 2021] Using CA: https://acme-v02.api.letsencrypt.org/directory
[Mon Nov 29 17:22:41 UTC 2021] Single domain='www.domain.com'
[Mon Nov 29 17:22:41 UTC 2021] Getting domain auth token for each domain
[Mon Nov 29 17:22:43 UTC 2021] Getting webroot for domain='www.domain.com'
[Mon Nov 29 17:22:43 UTC 2021] Verifying: www.domain.com
[Mon Nov 29 17:22:44 UTC 2021] Pending, The CA is processing your order, please just wait. (1/30)

Exit code: 1


Debug Information:
    OS: Ubuntu, v20.04.3 LTS
    Node Version: v14.18.1
    Ghost Version: 4.24.0
    Ghost-CLI Version: 1.18.1
    Environment: production
    Command: 'ghost setup ssl'

Additional log info available in: /home/ghost-mgr/.ghost/logs/ghost-cli-debug-2021-11-29T17_22_47_328Z.log

Try running ghost doctor to check your system for known issues.