Sorry, I mistyped, it's (all) 443.
It looks l like its not a firewalld issue though, as it turns out the
service is only listening on IPv6 when it's started on boot.. so
perhaps it's the service itself, or when systemd signals that the
network is up that's the issue.
Thanks