feat(nornsight): remove Norn Sight service and related configurations

systems/portal-1/haproxy/default.nix

@@ -7,8 +7,6 @@ let
     "jellyfin"
     "share"
   ];
-  extraDomains = [ "www.norn-sight.com" ];
-
   makeCert = name: {
     name = "${name}.tmmworkshop.com";
     value = {
@@ -18,18 +16,7 @@ let
     };
   };
 
-  makeExtraCert = name: {
-    inherit name;
-    value = {
-      webroot = "/var/lib/acme/.challenges";
-      group = "acme";
-      reloadServices = [ "haproxy.service" ];
-    };
-  };
-
-  acmeServices =
-    map (domain: "acme-${domain}.tmmworkshop.com.service") domains
-    ++ map (domain: "acme-${domain}.service") extraDomains;
+  acmeServices = map (domain: "acme-${domain}.tmmworkshop.com.service") domains;
 in
 {
   networking.firewall.allowedTCPPorts = [
@@ -65,7 +52,7 @@ in
   security.acme = {
     acceptTerms = true;
     defaults.email = "Richie@tmmworkshop.com";
-    certs = builtins.listToAttrs ((map makeCert domains) ++ (map makeExtraCert extraDomains));
+    certs = builtins.listToAttrs ((map makeCert domains));
   };
 
   systemd = {

systems/portal-1/haproxy/haproxy.cfg

@@ -32,7 +32,7 @@ defaults
 #Application Setup
 frontend ContentSwitching
   bind [::]:80 v4v6
-  bind [::]:443 v4v6 ssl crt /var/lib/acme/audiobookshelf.tmmworkshop.com/full.pem crt /var/lib/acme/cache.tmmworkshop.com/full.pem crt /var/lib/acme/gems.tmmworkshop.com/full.pem crt /var/lib/acme/jellyfin.tmmworkshop.com/full.pem crt /var/lib/acme/share.tmmworkshop.com/full.pem crt /var/lib/acme/gitea.tmmworkshop.com/full.pem crt /var/lib/acme/www.norn-sight.com/full.pem
+  bind [::]:443 v4v6 ssl crt /var/lib/acme/audiobookshelf.tmmworkshop.com/full.pem crt /var/lib/acme/cache.tmmworkshop.com/full.pem crt /var/lib/acme/gems.tmmworkshop.com/full.pem crt /var/lib/acme/jellyfin.tmmworkshop.com/full.pem crt /var/lib/acme/share.tmmworkshop.com/full.pem crt /var/lib/acme/gitea.tmmworkshop.com/full.pem crt
   mode  http
 
   # ACME challenge routing (must be first)
@@ -45,7 +45,6 @@ frontend ContentSwitching
   acl host_share  hdr(host) -i share.tmmworkshop.com
   acl host_gitea  hdr(host) -i gitea.tmmworkshop.com
   acl host_gems  hdr(host) -i gems.tmmworkshop.com
-  acl host_norn_sight  hdr(host) -i www.norn-sight.com
 
   # --- Request logging ---
   # Capture the Host header and User-Agent so the httplog shows who is
@@ -117,7 +116,6 @@ frontend ContentSwitching
   use_backend share_nodes  if host_share
   use_backend gitea  if host_gitea
   use_backend gems  if host_gems
-  use_backend norn_sight  if host_norn_sight
 
 # Proxy Gitea's built-in SSH server over Tailscale to Jeeves. Port 22 remains
 # available to Endlessh on Portal.
@@ -169,7 +167,3 @@ backend gems
   option forwardfor
   timeout server 1h
   server gems jeeves:8002
-
-backend norn_sight
-  mode http
-  server server jeeves:8001