sail: Move more from CF

system/nixos/acme-sail.nix

@@ -14,6 +14,10 @@
     };
 
     certs = {
+      "kempkens.io" = {
+        domain = "*.kempkens.io";
+      };
+
       "daniel.sx" = {
         domain = "*.daniel.sx";
       };

system/nixos/ntfy-sh.nix

@@ -19,4 +19,19 @@
       keepalive-interval = "45s";
     };
   };
+
+  services.nginx = {
+    virtualHosts."ntfy.kempkens.io" = {
+      http3 = true;
+
+      forceSSL = true;
+      useACMEHost = "kempkens.io";
+
+      locations."/" = {
+        recommendedProxySettings = true;
+        proxyWebsockets = true;
+        proxyPass = "http://127.0.0.1:8004";
+      };
+    };
+  };
 }