TLS-SNI-01 support is deprecated. This value is being dropped from the setting of --preferred-challenges and future versions of Certbot will error if it is included.
This is when I use - VALIDATION=tls-sni in docker-compose. http as validation works but then a far as I understand I should open port 80