remote-blackbox: Scrape HTTPS for some sites

Now that the Blackbox exporter does not follow redirects, we need to
explicitly tell it to scrape the HTTPS variant of sites that have it
enabled.  Otherwise, we only get info about the first HTTP-to-HTTPS
redirect response, which is not helpful for watching certificate expiry.

group_vars/remote-blackbox.yml

@@ -42,9 +42,9 @@ vmagent_scrape_configs:
     - https://dustin.hatch.name/
     - https://darkchestofwonders.us/
     - http://nratonpass.com/
-    - http://pyrocufflink.net/
+    - https://pyrocufflink.net/
     - http://ebonfire.com/
-    - http://chmod777.sh/
+    - https://chmod777.sh/
     - https://nextcloud.pyrocufflink.net/index.php
     - https://bitwarden.pyrocufflink.net/
     - https://git.pyrocufflink.net/

hosts

@@ -25,6 +25,9 @@ git0.pyrocufflink.blue
 
 [certbot]
 
+[chrony]
+chromie.pyrocufflink.blue
+
 [chrony:children]
 kubelet
 pyrocufflink
@@ -34,6 +37,7 @@ node-6a3f87.k8s.pyrocufflink.black
 node-6ed191.k8s.pyrocufflink.black
 
 [collectd]
+chromie.pyrocufflink.blue
 
 [collectd:children]
 kubelet
@@ -176,7 +180,6 @@ web0.pyrocufflink.blue
 pxe0.pyrocufflink.blue
 
 [pyrocufflink]
-chromie.pyrocufflink.blue
 cloud0.pyrocufflink.blue
 db0.pyrocufflink.blue
 dc-grumbly.pyrocufflink.blue
@@ -234,6 +237,9 @@ smtp1.pyrocufflink.blue
 
 [squid]
 
+[sudo]
+chromie.pyrocufflink.blue
+
 [sudo:children]
 pyrocufflink
 vps