From eae5e105ff4bb849e687080d5e8ea9a5e0b8a0a8 Mon Sep 17 00:00:00 2001
From: Jake Hillion <jake@hillion.co.uk>
Date: Sat, 18 May 2024 16:41:53 +0100
Subject: [PATCH] unifi: move jorah->boron

---
 hosts/boron.cx.ts.hillion.co.uk/default.nix | 2 ++
 hosts/jorah.cx.ts.hillion.co.uk/default.nix | 5 -----
 modules/locations.nix                       | 2 +-
 3 files changed, 3 insertions(+), 6 deletions(-)

diff --git a/hosts/boron.cx.ts.hillion.co.uk/default.nix b/hosts/boron.cx.ts.hillion.co.uk/default.nix
index bac1155..8da6e2c 100644
--- a/hosts/boron.cx.ts.hillion.co.uk/default.nix
+++ b/hosts/boron.cx.ts.hillion.co.uk/default.nix
@@ -111,10 +111,12 @@
             53 # DNS
             80 # HTTP 1-2
             443 # HTTPS 1-2
+            8080 # Unifi (inform)
           ];
           allowedUDPPorts = lib.mkForce [
             53 # DNS
             443 # HTTP 3
+            3478 # Unifi STUN
           ];
         };
       };
diff --git a/hosts/jorah.cx.ts.hillion.co.uk/default.nix b/hosts/jorah.cx.ts.hillion.co.uk/default.nix
index d74668d..2247be3 100644
--- a/hosts/jorah.cx.ts.hillion.co.uk/default.nix
+++ b/hosts/jorah.cx.ts.hillion.co.uk/default.nix
@@ -88,14 +88,9 @@
         eth0 = {
           allowedTCPPorts = lib.mkForce [
             53 # DNS
-            80 # HTTP 1-2
-            443 # HTTPS 1-2
-            8080 # Unifi (inform)
           ];
           allowedUDPPorts = lib.mkForce [
             53 # DNS
-            443 # HTTP 3
-            3478 # Unifi STUN
           ];
         };
       };
diff --git a/modules/locations.nix b/modules/locations.nix
index 5cf8630..b645a66 100644
--- a/modules/locations.nix
+++ b/modules/locations.nix
@@ -32,7 +32,7 @@ in
             "li.pop.ts.hillion.co.uk"
             "microserver.home.ts.hillion.co.uk"
           ];
-          unifi = "jorah.cx.ts.hillion.co.uk";
+          unifi = "boron.cx.ts.hillion.co.uk";
           version_tracker = [ "boron.cx.ts.hillion.co.uk" "jorah.cx.ts.hillion.co.uk" ];
         };
       };