chore: Refresh of repo

infra/modules/vpn/main.tf

@@ -1,4 +1,4 @@
-# vpn: WireGuard (wg-easy) + Traefik. Not attached to the private network (see docs/architecture.md).
+# vpn: WireGuard (wg-easy) + Traefik. Not attached to the private network.
 resource "hcloud_firewall" "this" {
   name = "vpn-firewall"
 
@@ -9,7 +9,7 @@ resource "hcloud_firewall" "this" {
     source_ips = var.allowed_ssh_source_ips
   }
 
-  rule { # Traefik http/https (traefik.vpn.luke-else.co.uk)
+  rule { # Traefik http/https
     direction  = "in"
     protocol   = "tcp"
     port       = "80"
@@ -38,5 +38,5 @@ resource "hcloud_server" "this" {
   location     = var.location
   ssh_keys     = var.ssh_key_ids
   firewall_ids = [hcloud_firewall.this.id]
-  labels       = { role = "vpn" } # picked up by ansible/inventory/hcloud.yml
+  labels       = { role = "vpn" }
 }