servo: uninsane.org: remove SSL hacks

i *think* these aren't needed, now i don't use ejabberd

hosts/by-name/servo/services/nginx/uninsane.org.nix

@@ -1,6 +1,5 @@
 { pkgs, ... }:
 {
-  # web blog/personal site
   # alternative way to link stuff into the share:
   # sane.fs."/var/www/sites/uninsane.org/share/Ubunchu".mount.bind = "/var/media/Books/Visual/HiroshiSeo/Ubunchu";
   # sane.fs."/var/media/Books/Visual/HiroshiSeo/Ubunchu".dir = {};
@@ -10,9 +9,6 @@
     # and things don't look right. so force SSL.
     forceSSL = true;
     enableACME = true;
-    # inherit kTLS;
-    # for OCSP stapling
-    sslTrustedCertificate = "${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt";
 
     # extraConfig = ''
     #   # "public" log so requests show up in goaccess metrics
@@ -137,26 +133,4 @@
     locations."= /blog/rss".extraConfig = "return 301 /atom.xml;";
     locations."= /blog/rss.xml".extraConfig = "return 301 /atom.xml;";
   };
-
-  # let's encrypt default chain looks like:
-  # - End-entity certificate ← R3 ← ISRG Root X1 ← DST Root CA X3
-  # - <https://community.letsencrypt.org/t/production-chain-changes/150739>
-  # DST Root CA X3 expired in 2021 (?)
-  # the alternative chain is:
-  # - End-entity certificate ← R3 ← ISRG Root X1 (self-signed)
-  # using this alternative chain grants more compatibility for services like ejabberd
-  # but might decrease compatibility with very old clients that don't get updates (e.g. old android, iphone <= 4).
-  # security.acme.defaults.extraLegoFlags = [
-  security.acme.certs."uninsane.org" = rec {
-    # ISRG Root X1 results in lets encrypt sending the same chain as default,
-    # just without the final ISRG Root X1 ← DST Root CA X3 link.
-    # i.e. we could alternatively clip the last item and achieve the exact same thing.
-    extraLegoRunFlags = [
-      "--preferred-chain" "ISRG Root X1"
-    ];
-    extraLegoRenewFlags = extraLegoRunFlags;
-  };
-  # TODO: alternatively, we could clip the last cert IF it's expired,
-  # optionally outputting that to a new cert file.
-  # security.acme.defaults.postRun = "";
 }