fix: Split wildcard and root domains for ACME (#98)

Reviewed-on: https://git.selfprivacy.org/SelfPrivacy/selfprivacy-nixos-config/pulls/98

letsencrypt/acme.nix

@@ -33,13 +33,17 @@ in
     certs = {
       "${cfg.domain}" = {
         domain = "*.${cfg.domain}";
-        extraDomainNames = [ "${cfg.domain}" ];
         group = "acmereceivers";
         dnsProvider = lib.strings.toLower cfg.dns.provider;
         credentialsFile = acme-env-filepath;
         dnsPropagationCheck =
           ! (lib.elem cfg.dns.provider dnsPropagationCheckExceptions);
       };
+      "root-${cfg.domain}" = {
+        domain = cfg.domain;
+        group = "acmereceivers";
+        webroot = "/var/lib/acme/acme-challenge";
+      };
     };
   };
   systemd.services.acme-secrets = {