services.headscale.settings.tls_letsencrypt_listen

When HTTP-01 challenge is chosen, letsencrypt must set up a verification endpoint, and it will be listening on: :http = port 80.