feat(dgn-web): Enable module on nodes serving web content

Also remove the firewall config as it is now centralized.

machines/compute01/_configuration.nix

@@ -9,6 +9,7 @@ let
   # List of modules to enable
   enabledModules = [
     "dgn-dns"
+    "dgn-web"
   ];
 
   # List of services to enable

machines/compute01/nextcloud.nix

@@ -75,6 +75,4 @@ in {
     (setDefault { owner = "nextcloud"; }
       (builtins.filter (lib.hasPrefix "nextcloud-") config.dgn-secrets.names))
   ];
-
-  networking.firewall.allowedTCPPorts = [ 80 443 ];
 }

machines/storage01/_configuration.nix

@@ -8,6 +8,7 @@ let
 
   # List of modules to enable
   enabledModules = [
+    "dgn-web"
   ];
 
   # List of services to enable

machines/storage01/forgejo.nix

@@ -94,6 +94,4 @@ in {
     (setDefault { owner = "git"; }
       (builtins.filter (lib.hasPrefix "forgejo-") config.dgn-secrets.names))
   ];
-
-  networking.firewall.allowedTCPPorts = [ 80 443 ];
 }

machines/web01/_configuration.nix

@@ -8,6 +8,7 @@ let
 
   # List of modules to enable
   enabledModules = [
+    "dgn-web"
   ];
 
   # List of services to enable

machines/web01/plausible.nix

@@ -52,8 +52,4 @@ in
       };
     };
   };
-
-  # dgn-secrets.options."_smtp-password-file".owner = "plausible";
-  #
-  networking.firewall.allowedTCPPorts = [ 80 443 ];
 }