Fix issues for wildcard *.irc cert

flake.lock

@@ -437,11 +437,11 @@
         "utils": "utils_6"
       },
       "locked": {
-        "lastModified": 1696797333,
-        "narHash": "sha256-SLhaz1XzUVzWv/+ScJgmXmnMG38IahXl7kE2X3xptn8=",
+        "lastModified": 1699856138,
+        "narHash": "sha256-EdVHNKl6cSdnpviq4pxhhteCscIYo+WRgOtOVHlbW48=",
         "ref": "refs/heads/main",
-        "rev": "b8b8a6a07d852b57cd139d424474cf500fff9ac5",
-        "revCount": 15,
+        "rev": "f94001e3c3de717851b3bd7f03fed931b1e1801a",
+        "revCount": 16,
         "type": "git",
         "url": "ssh://git@git.tempest.dev/ashe/nixos-config-private"
       },
@@ -683,11 +683,11 @@
         "utils": "utils_10"
       },
       "locked": {
-        "lastModified": 1692434292,
-        "narHash": "sha256-VCP/25yWRvBtAgBjbnia2l3qpfLVsWb0icnt3P9cXFc=",
+        "lastModified": 1699129335,
+        "narHash": "sha256-IIxffi/naZtgZnHkWlGpuw4hTVY5mTNfJrTV25CSNsQ=",
         "ref": "refs/heads/main",
-        "rev": "7804d2cd10d46ff7890e402b922b9be12fd50f7c",
-        "revCount": 61,
+        "rev": "f76734f2aad4e8ced985906e753ca287050dc696",
+        "revCount": 62,
         "type": "git",
         "url": "http://git.tempest.dev/ashe/tempest.dev"
       },

hosts/nyx/configuration.nix

@@ -14,7 +14,6 @@
 
   nix.settings.substituters = [
     "https://cache.nixos.org/"
-    "http://hemera.tempest.local"
   ];
 
   nix.trustedUsers = [ "rose" ];
@@ -44,6 +43,7 @@
     psmisc
   ];
 
+  networking.enableIPv6 = false;
   networking.firewall.allowedTCPPorts = [ 22 80 443 ];
   networking.interfaces.ens3 = {
     ipv4.addresses = [ {
@@ -53,11 +53,6 @@
       address = "104.168.143.74";
       prefixLength = 16;
     }];
-
-    ipv6.addresses = [ {
-      address = "2607:5501:3000:1e21::2";
-      prefixLength = 16;
-    }];
   };
 
   networking.defaultGateway = "104.168.218.1";

hosts/nyx/include/acme.nix

@@ -2,17 +2,9 @@
   security.acme.acceptTerms = true;
   security.acme.defaults.email = "acme@tempest.dev";
 
-  security.acme.certs."wildcard-tempest.dev" = {
-    domain = "*.tempest.dev";
-    dnsProvider = "namecheap";
-    credentialsFile = "/var/lib/secrets/namecheap.env";
-    dnsPropagationCheck = false;
-  };
-
   security.acme.certs."wildcard-irc.tempest.dev" = {
     domain = "*.irc.tempest.dev";
     dnsProvider = "namecheap";
     credentialsFile = "/var/lib/secrets/namecheap.env";
-    dnsPropagationCheck = false;
   };
 }