Does netmaker automatically configure letsencrypt or something? I installed but I don't see anything about setting up SSL for the server

Default install uses trafik as reverse proxy which handles obtaining and updating ssl certs.

I assume that means port 80 has to be open for the letsencrypt bot?

Traefik handles ssl certs