Hello there! Can I host netmaker behind a reverse proxy with self-signed certificates and give the tls certificates to clients when joining somehow?

Not really, I wouldn't recommend trying this

Why not? Lots of clients support 'custom' certificates that get generated / used outside the public chains