nginx: simplify ssl settings

modules/services/forgejo/module.nix

@@ -33,19 +33,9 @@ in {
     services.nginx = {
       enable = true;
       virtualHosts.${domain} = {
-        forceSSL = true;
+        addSSL = true;
-        # enableACME = true;
+        enableACME = true;
-        useACMEHost = domain;
-        inherit acmeRoot;
-        extraConfig = ''
-          # nginx defaults to a 1MB size limit for uploads, which
-          # *definitely* isn't enough for Git LFS.
-          # 'client_max_body_size 300m;' would set a limit of 300MB
-          # setting it to 0 means "no limit"
-          client_max_body_size 512M;
-        '';
         locations."/" = {
-          recommendedProxySettings = true;
           proxyPass = "http://localhost:${toString port}";
         };
       };

modules/services/nginx/module.nix

@@ -27,6 +27,10 @@ in {
       recommendedProxySettings = true;
       recommendedZstdSettings = true;
 
+      # nginx defaults to a 1MB size limit for uploads, which
+      # *definitely* isn't enough for Git LFS.
+      # 'client_max_body_size 300m;' would set a limit of 300MB
+      # setting it to 0 means "no limit"
       clientMaxBodySize = mkDefault "512m";
     };
   };