move acme to server config

profiles/server/default.nix

@@ -5,7 +5,7 @@
     passwordAuthentication = false;
     permitRootLogin = "no";
   };
-  networking.firewall.allowedTCPPorts = [ 80 433 22 ]; # ssh and website
+  networking.firewall.allowedTCPPorts = [ 80 443 22 ]; # ssh and website
   security.sudo.wheelNeedsPassword = false; # needed for deploy-rs
 
   security.acme.defaults.email = "anish+acme@lakhwara.com";

profiles/site/default.nix

@@ -2,6 +2,4 @@
 {
   services."anish.lakhwara.com".enable = true;
   services."anish.lakhwara.com".enableSSL = true;
-  security.acme.email = "anish+acme@lakhwara.com";
-  security.acme.acceptTerms = true;
 }