From 39e3835c338e2e2ce9efb7e1f4f8e3aa6406b805 Mon Sep 17 00:00:00 2001
From: Rasmus Wejlgaard <pez@pez.sh>
Date: Mon, 30 Mar 2026 20:11:36 +0000
Subject: [PATCH] Clean up stale DNS records and Caddyfile entries

Remove webdav.pez.sh DNS record (WebDAV replaced by Nextcloud AIO on cloud.pez.sh)
Remove alertmanager.pez.sh DNS record and Caddyfile block (Alertmanager not running on london-a)
Remove status-https HTTPS record pointing to old statuspage.io (status.pez.sh is self-hosted on helsinki-a)
Remove commented-out WebDAV block from Caddyfile
Remove empty section headers for decommissioned hosts (london-c, copenhagen-b, copenhagen-c)

Closes PESO-102
---
 ansible/services/caddy/Caddyfile | 20 --------------------
 terraform/cloudflare_dns.tf      | 30 ------------------------------
 2 files changed, 50 deletions(-)

diff --git a/ansible/services/caddy/Caddyfile b/ansible/services/caddy/Caddyfile
index 2f4b3af..0fcd497 100644
--- a/ansible/services/caddy/Caddyfile
+++ b/ansible/services/caddy/Caddyfile
@@ -32,15 +32,6 @@ prometheus.pez.solutions, prometheus.pez.sh {
         reverse_proxy 100.122.219.41:9090
 }
 
-# Alertmanager
-alertmanager.pez.solutions, alertmanager.pez.sh {
-	forward_auth localhost:9091 {
-		uri /api/authz/forward-auth
-		copy_headers Remote-User Remote-Groups Remote-Name Remote-Email
-	}
-        reverse_proxy 100.122.219.41:9093
-}
-
 ## LONDON-B SERVICES ##
 
 # Jellyfin
@@ -126,11 +117,6 @@ jellyfin-requests.pez.solutions, jellyfin-requests.pez.sh {
         reverse_proxy 100.84.65.101:5056
 }
 
-#WebDAV
-#https://cloud.pez.sh {
-#        reverse_proxy 100.84.65.101:8080
-#}
-
 https://cloud.pez.sh:443 {
 	reverse_proxy 100.84.65.101:11000 # Adjust to match APACHE_PORT and APACHE_IP_BINDING. See https://github.com/nextcloud/all-in-one/blob/main/reverse-proxy.md#adapting-the-sample-web-server-configurations-below
 }
@@ -139,14 +125,8 @@ music.pez.sh {
 	reverse_proxy 100.84.65.101:4533
 }
 
-## LONDON-C SERVICES ##
-
 ## COPENHAGEN-A SERVICES ##
 
-## COPENHAGEN-B SERVICES ##
-
-## COPENHAGEN-C SERVICES ##
-
 ## NUREMBERG-A SERVICES ##
 
 ## HELSINKI-A SERVICES ##
diff --git a/terraform/cloudflare_dns.tf b/terraform/cloudflare_dns.tf
index 657509c..0f2b347 100644
--- a/terraform/cloudflare_dns.tf
+++ b/terraform/cloudflare_dns.tf
@@ -9,15 +9,6 @@ resource "cloudflare_zone" "pez-sh" {
 # A Records
 # =============================================================================
 
-resource "cloudflare_dns_record" "alertmanager" {
-  zone_id = cloudflare_zone.pez-sh.id
-  name    = "alertmanager"
-  type    = "A"
-  content = hcloud_server.helsinki-a.ipv4_address
-  proxied = false
-  ttl     = 1
-}
-
 resource "cloudflare_dns_record" "apps" {
   zone_id = cloudflare_zone.pez-sh.id
   name    = "apps"
@@ -270,15 +261,6 @@ resource "cloudflare_dns_record" "thiswebsitedoesnotexist" {
   ttl     = 1
 }
 
-resource "cloudflare_dns_record" "webdav" {
-  zone_id = cloudflare_zone.pez-sh.id
-  name    = "webdav"
-  type    = "A"
-  content = hcloud_server.helsinki-a.ipv4_address
-  proxied = false
-  ttl     = 1
-}
-
 resource "cloudflare_dns_record" "wow" {
   zone_id = cloudflare_zone.pez-sh.id
   name    = "wow"
@@ -318,18 +300,6 @@ resource "cloudflare_dns_record" "public" {
 # HTTPS Records
 # =============================================================================
 
-resource "cloudflare_dns_record" "status-https" {
-  zone_id = cloudflare_zone.pez-sh.id
-  name    = "status"
-  type    = "HTTPS"
-  data = {
-    priority = 100
-    target   = "https://pezsolutions.statuspage.io."
-    value    = "ipv6hint=\"::1\""
-  }
-  ttl = 1
-}
-
 # =============================================================================
 # MX Records
 # =============================================================================