refactor: more sane profile structure

profiles/nixos/server/ankisync.nix

@@ -0,0 +1,41 @@
+{ lib, config, ... }:
+{
+  config = lib.mkIf config.swarselsystems.server.ankisync {
+
+    networking.firewall.allowedTCPPorts = [ 22701 ];
+
+    sops.secrets.swarsel = { owner = "root"; };
+
+    services.anki-sync-server = {
+      enable = true;
+      port = 27701;
+      address = "0.0.0.0";
+      openFirewall = true;
+      users = [
+        {
+          username = "Swarsel";
+          passwordFile = config.sops.secrets.swarsel.path;
+        }
+      ];
+    };
+
+    services.nginx = {
+      virtualHosts = {
+        "synki.swarsel.win" = {
+          enableACME = true;
+          forceSSL = true;
+          acmeRoot = null;
+          locations = {
+            "/" = {
+              proxyPass = "http://localhost:27701";
+              extraConfig = ''
+                client_max_body_size 0;
+              '';
+            };
+          };
+        };
+      };
+    };
+  };
+
+}