So the bit about port 80 doesn't seem to be true. I dropped it from the firewall rules and things still work. I think flushing the nftables worked out some bad state that was causing issues