feat(portal): move edge proxy services from Jeeves

- move HAProxy and ACME certificate management to Portal - route application backends to Jeeves over Tailscale - restrict Jeeves backend ports to the Tailscale interface - expose Gems for remote proxy access
2026-08-26 07:33:31 -04:00
parent 8245d0f82e
commit 7f08a6f788
11 changed files with 28 additions and 31 deletions
@@ -4,8 +4,6 @@
  ...
 }:
 {
-  networking.firewall.trustedInterfaces = [ "tailscale0" ];
-
  nix.settings = {
    trusted-substituters = [ "http://jeeves:5000" ];
    substituters = [ "http://jeeves:5000/?priority=1&want-mass-query=true" ];