www.global: move jorah->boron

hosts/boron.cx.ts.hillion.co.uk/default.nix

@@ -46,6 +46,7 @@
     ## Custom Services
     custom = {
       locations.autoServe = true;
+      www.global.enable = true;
       services = {
         gitea.actions = {
           enable = true;
@@ -106,9 +107,12 @@
         eth0 = {
           allowedTCPPorts = lib.mkForce [
             53 # DNS
+            80 # HTTP 1-2
+            443 # HTTPS 1-2
           ];
           allowedUDPPorts = lib.mkForce [
             53 # DNS
+            443 # HTTP 3
           ];
         };
       };

hosts/jorah.cx.ts.hillion.co.uk/default.nix

@@ -22,7 +22,6 @@
     ## Custom Services
     custom = {
       locations.autoServe = true;
-      www.global.enable = true;
       services = {
         gitea.actions = {
           enable = true;

modules/services/homeassistant.nix

@@ -65,8 +65,8 @@ in
           http = {
             use_x_forwarded_for = true;
             trusted_proxies = with config.custom.dns.authoritative; [
-              ipv4.uk.co.hillion.ts.cx.jorah
-              ipv6.uk.co.hillion.ts.cx.jorah
+              ipv4.uk.co.hillion.ts.cx.boron
+              ipv6.uk.co.hillion.ts.cx.boron
             ];
           };
 

secrets/secrets.nix

@@ -123,9 +123,9 @@ in
   "homeassistant/secrets.yaml.age".publicKeys = jake_users ++ [ ts.home.microserver ];
 
   # Web certificates
-  "certs/hillion.co.uk.pem.age".publicKeys = jake_users ++ [ ts.cx.jorah ];
-  "certs/blog.hillion.co.uk.pem.age".publicKeys = jake_users ++ [ ts.cx.jorah ];
-  "certs/gitea.hillion.co.uk.pem.age".publicKeys = jake_users ++ [ ts.cx.jorah ];
-  "certs/homeassistant.hillion.co.uk.pem.age".publicKeys = jake_users ++ [ ts.cx.jorah ];
-  "certs/links.hillion.co.uk.pem.age".publicKeys = jake_users ++ [ ts.cx.jorah ];
+  "certs/hillion.co.uk.pem.age".publicKeys = jake_users ++ [ ts.cx.boron ];
+  "certs/blog.hillion.co.uk.pem.age".publicKeys = jake_users ++ [ ts.cx.boron ];
+  "certs/gitea.hillion.co.uk.pem.age".publicKeys = jake_users ++ [ ts.cx.boron ];
+  "certs/homeassistant.hillion.co.uk.pem.age".publicKeys = jake_users ++ [ ts.cx.boron ];
+  "certs/links.hillion.co.uk.pem.age".publicKeys = jake_users ++ [ ts.cx.boron ];
 }