enable ACME on main domain

machines/b4l/configuration.nix

@@ -1,3 +1,4 @@
+{ config, ... }:
 {
   imports = [
 
@@ -12,4 +13,9 @@
   networking.fqdn = "b4l.co.th";
   system.stateVersion = "25.11";
 
+  security.acme.defaults.email = "admin@b4l.co.th";
+  security.acme.acceptTerms = true;
+  services.nginx.virtualHosts."${config.networking.fqdn}" = {
+    enableACME = true;
+  };
 }