feat(portal): move edge proxy services from Jeeves

- move HAProxy and ACME certificate management to Portal - route application backends to Jeeves over Tailscale - restrict Jeeves backend ports to the Tailscale interface - expose Gems for remote proxy access
2026-08-26 07:33:31 -04:00
parent 8245d0f82e
commit 7f08a6f788
11 changed files with 28 additions and 31 deletions
@@ -4,7 +4,7 @@ in
 {
  services.jellyfin = {
    enable = true;
-    openFirewall = true;
+    openFirewall = false;
    dataDir = "${vars.services}/jellyfin";
    cacheDir = "${vars.services}/jellyfin/cache";
  };