Thanks for the quick reply.
Duh, dumb mistake: I had both ubuntu’s ufw firewall and Digital Ocean’s cloud firewall running.
I disabled the cloud firewall and kept ufw.
But I’m curious, what port check utility did you use? Sounds like a handy tool to have.