It is usually recommended that you just help by far the most restrictive profile that could still allow the targeted visitors you’ve configured. Since you haven’t configured SSL on your server but In this particular manual, you are going to only will need to allow targeted traffic on port 80: https://apache-support44333.blogdal.com/28488889/apache-web-server-support-fundamentals-explained