feat(portal): move edge proxy services from Jeeves

- move HAProxy and ACME certificate management to Portal - route application backends to Jeeves over Tailscale - restrict Jeeves backend ports to the Tailscale interface - expose Gems for remote proxy access
2026-08-26 07:33:31 -04:00
parent 8245d0f82e
commit 7f08a6f788
11 changed files with 28 additions and 31 deletions
@@ -36,7 +36,7 @@ in
      Type = "simple";
      User = "gems";
      Group = "gems";
-      ExecStart = "${pkgs.my_python}/bin/python -m python.gems.main --host 127.0.0.1 --port 8002";
+      ExecStart = "${pkgs.my_python}/bin/python -m python.gems.main --host 0.0.0.0 --port 8002";
      Restart = "on-failure";
      RestartSec = "5s";
      StandardOutput = "journal";