A firewall which at its heart is what Opnsense is has an 'in' and an 'out'. Traffic arriving on the 'in' side 'Internet or WAN' is filtered and passed to the 'LAN', that explains it in simple terms. It's more complex than that but take it as a base. So if you have an 'In' and an 'Out' you need two NICs or network ports.Now you can do it with one NIC using VLANs, but then you need a VLAN capable switch to separate the LAN and the WAN traffic. Does that make sense?
I would not think so. Here's a link to the wiki page which tells you the minimum requirements.https://wiki.opnsense.org/manual/hardware.html