feat(portal): move edge proxy services from Jeeves

- move HAProxy and ACME certificate management to Portal - route application backends to Jeeves over Tailscale - restrict Jeeves backend ports to the Tailscale interface - expose Gems for remote proxy access
2026-08-25 22:09:44 -04:00
parent e1b8a29e61
commit a51b8bc355
11 changed files with 28 additions and 31 deletions
@@ -4,7 +4,7 @@ in
 {
  services.jellyfin = {
    enable = true;
-    openFirewall = true;
+    openFirewall = false;
    dataDir = "${vars.services}/jellyfin";
    cacheDir = "${vars.services}/jellyfin/cache";
  };