fix: need to split wildcard definitions because the nginx module would cause infinite recursion otherwise

hosts/envoy/acme.nix

@@ -24,6 +24,6 @@ in {
       dnsPropagationCheck = true;
       reloadServices = ["nginx"];
     };
-    inherit (acme) certs;
+    inherit (acme) certs wildcardDomains;
   };
 }

hosts/envoy/default.nix

@@ -14,7 +14,6 @@
   boot.mode = "bios";
 
   users.groups.acme.members = ["nginx"];
-  wireguard.proxy-sentinel.firewallRuleForAll.allowedTCPPorts = [80 443];
   services.nginx.enable = true;
   services.nginx.recommendedSetup = true;
 

hosts/sentinel/acme.nix

@@ -24,6 +24,6 @@ in {
       dnsPropagationCheck = true;
       reloadServices = ["nginx"];
     };
-    inherit (acme) certs;
+    inherit (acme) certs wildcardDomains;
   };
 }