None. Since your node will initiate the tunnel client-sides to our servers, all LN related ports will go through the tunnel. So neither 443 (https) nor 80 (web) are required.