Yes you do.

First of all, there are services that will refuse to work properly on http only. Specially if you want an SSO like authelia, will not work over http

Second, modern browsers will complain when using plain http if the website has forms to fill or passwords to write … very annoying, but it’s the way it is.

Third, having the “this site is not secure” broken lock is not very nice for users. At best they might complain, at worse they will get used to “unsecured” websites and .ight end up easier prey for fake sites in the future. Yes I mean wife or kids. These are things normal users should not see as normal…

Last, if you expose anything to the web, please never ever do that without proper https with certificates from let’s encrypt.