Is external web interface needed?

Is it a requirement that external (internet facing) access to the web interface be available if I’m running multiple hosts with no interconnection?

Is it only a requirement for first setting up a host? I want to block access to the GUI (port 8080) so only certain hosts have access or make it a requirement to tunnel into it.

Is it a requirement to have it available for HA?

Thanks