Yes you do; Port 80 needs to be accessible for the HTTP-01 Challenge.
Also Hardenize Report: stream.no-soap.net
You want it to look like this from your previous Help topic Can't create certificate for Icecast stream self-hosted on Pi - #13 by Bruce5051