voyager/kanidm: remove second nginx

hosts/voyager/services/kanidm.nix

@@ -10,7 +10,7 @@ in {
     serverSettings = {
       origin = "https://${cfg.serverSettings.domain}";
       domain = "auth.feal.no";
-      bindaddress = "127.0.1.2:8300";
+      bindaddress = "0.0.0.0:8300";
       inherit ldapbindaddress;
 
       tls_chain = "/run/credentials/kanidm.service/cert.crt";
@@ -25,23 +25,12 @@ in {
     ];
   };
 
-
-  services.nginx.virtualHosts."${cfg.serverSettings.domain}" = {
-    forceSSL = true;
-    sslCertificate    = "${certPath}.crt";
-    sslCertificateKey = "${certPath}.key";
-    locations."/" = {
-      proxyPass = "https://${cfg.serverSettings.bindaddress}";
-      extraConfig = ''
-        proxy_ssl_verify off;
-      '';
-    };
-  };
-
   environment = {
     systemPackages = [ pkgs.kanidm ];
     etc."kanidm/config".text = ''
       uri="${cfg.serverSettings.origin}"
     '';
   };
+
+  networking.firewall.allowedTCPPorts = [ 8300 ];
  }