As the only change I made was enable tls I made a backup, restored from a backup from before those changes and we're back working.
I'll restore the 'non working' backup on a new server and investigate.
Having got a working system again, how do I move the call records over from the period between...