If you want to change the passive ports range (which by default is 50000-50050), you can do so via environment variables (PASSIVEPORTS_START and PASSIVEPORTS_END).
In any case, you also have to enable a matching range of exposed ports.
## notes
Please note that you have to restart the container (or send sighup to proftpd) whenever the certificate is renewed.