Just to put a pin in this ,from my perspective, I gave up fighting this on truenas and leaned on Caddy in my OpnSense router. It’s a plugin and there’s a pretty straightforward and well documented workflow on how to get it running.
Only drawback is that everything is using a (valid) wildcard cert for my domain instead of generating a cert for each site. Probably my fault somewhere but it works despite that annoyance.
Correct, and this is in System Advanced options if memory serves.
As a rule, a few minutes after anything joins my network, if I can change the ports on the web interface for it, I will. Everything tries to use 80/443/8080/8443 and eventually something will break. So stop that from being a problem.
This is also why a lot of docker apps in the TN apps catalog use 30000+ port numbers. Assuming they don’t overlap you’ll never run into problems accessing an app you deploy via the app catalog (using defaults).