

Yes you do.
First of all, there are services that will refuse to work properly on http only. Specially if you want an SSO like authelia, will not work over http
Second, modern browsers will complain when using plain http if the website has forms to fill or passwords to write … very annoying, but it’s the way it is.
Third, having the “this site is not secure” broken lock is not very nice for users. At best they might complain, at worse they will get used to “unsecured” websites and .ight end up easier prey for fake sites in the future. Yes I mean wife or kids. These are things normal users should not see as normal…
Last, if you expose anything to the web, please never ever do that without proper https with certificates from let’s encrypt.



I tried stalwart. Could not run reliably on the server I rent. Too slow.
Instead postfix + dovecot just fly and barely used any resources.
Maybe tools like stalwart have use for bigger email servers, but for my use case it’s just massive overkill. Easy to setup tough.