Epiphany: Systemd reads more than a single environment file. This
lets me improve the file naming much.

Unfortunately still prints a bold warning on deployment.

This will store the supposedly secret URL in the Nix Store and
print a honking big warning about it.

This lets other modules override these settings.

As per @jcalderone and @florian videoconf on 2021-08-06.

- Remove custom handling of Let's Encrypt certs, use NixOs' ACME
  integration instead.

- Use NGINX for TLS termination.

NGINX does longest-prefix-match for selecting locations.

This should let it work for both enabled and disabled configurations

Using AWS is what causes it so using AWS can be what fixes it, too.

... that don't have it by default. (<5.6)

This makes wireguard work on older kernels (19.09 nixos), i.e.
our storage servers currently) and newer kernels (21.05, i.e.
the monitoring server).

Fewer lines almost always better.  Also, we don't want to spread
these out unless we have to.

... we'll need this later for the TLS cert.

update the localdev grid's secrets and other configuration to reflect this

testing and production are broken by this commit since they have not been
updated similarly

update the localdev grid's secrets and other configuration to reflect this

testing and production are broken by this commit since they have not been
updated similarly

Also add my key to local secrets for the moment because otherwise localdev
grid cannot build itself :/