Firewall improvements: - [x] Cleanup unused firewall config in Jenkins Agents - [x] Force Jenkins Agents to connect directly to the VM's IP: - [x] Export rules so isoworkers-mail.tails.net accepts from Jenkins Agents in mail and http(s) ports. - [x] Map isoworkers-mail.tails.net to 192.168.126.20 in Jenkins Agents - [x] Remove the tirewall::public_service entries for mail (leave port 80) - [x] Remove custom firewall rules added to Iguana. Code improvements: - [x] Move the client email password config to `hieradata/role/isoworker.eyaml` - [x] Move the Nginx config from node definition to a profile. - [x] Move the Libvirt hosts firewall config to exported resources in the same profile as above. - ~~Refactor `tails::tester::support::email*` to a profile (same as above, probably).~~ → Deferred to #16958 Missing bits: - [x] tails!1268+ - [x] Apply improvements to the firewall config once again. - [x] Check that Thunderbird tests keep working.