Is it necessary to expose port for 1password/connect-sync?

The sample docker compose file exposes ports for both api and sync. I understand api needs it in order to accept requests, but does sync really need a public port to sync data from 1password, which I assume is what it does?

---

1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Browser:_ Not Provided