chore(aegis): remove local TLS configuration

ansible/roles/profile_aegis/tasks/main.yml

@@ -135,6 +135,15 @@
   loop_control:
     label: "{{ item }}"
 
+- name: Remove retired Aegis TLS access rule
+  tags: [aegis, firewall]
+  ansible.posix.firewalld:
+    rich_rule: 'rule family="ipv4" source address="{{ aegis_lan_subnet }}" port port="853" protocol="tcp" accept'
+    permanent: true
+    immediate: true
+    state: disabled
+    zone: "{{ aegis_firewalld_zone }}"
+
 - name: Allow Aegis services from the LAN only
   tags: [aegis, firewall]
   ansible.posix.firewalld:
@@ -146,7 +155,6 @@
   loop:
     - 'rule family="ipv4" source address="{{ aegis_lan_subnet }}" service name="ssh" accept'
     - 'rule family="ipv4" source address="{{ aegis_lan_subnet }}" service name="dns" accept'
-    - 'rule family="ipv4" source address="{{ aegis_lan_subnet }}" port port="853" protocol="tcp" accept'
     - 'rule family="ipv4" source address="{{ aegis_lan_subnet }}" service name="aegis-adguard-web" accept'
   loop_control:
     label: "{{ item }}"

ansible/roles/profile_aegis/templates/aegis-adguard-web.xml.j2

@@ -3,5 +3,4 @@
   <short>Aegis AdGuard Home web interface</short>
   <description>AdGuard Home administrative web interface on Aegis.</description>
   <port protocol="tcp" port="{{ aegis_adguard_web_port }}"/>
-  <port protocol="tcp" port="443"/>
 </service>