refactor: update host binding and consolidate ACME domains

- Change OpenWebUI host binding from 0.0.0.0 to 127.0.0.1 for security.
- Consolidate ACME certificates under internal.hoyer.world with extra domain names.
- Update Nginx virtual hosts to use the unified ACME host internal.hoyer.world.

systems/x86_64-linux/sgx/acme.nix

@@ -1,8 +1,5 @@
-{
-  pkgs,
-  lib,
-  config,
-  ...
+{ config
+, ...
 }:
 {
   sops.secrets.internetbs = {
@@ -17,8 +14,12 @@
       credentialsFile = config.sops.secrets.internetbs.path;
     };
     certs = {
-      "openwebui.hoyer.world" = { };
-      "syncthing.hoyer.world" = { };
+      "internal.hoyer.world" = {
+        extraDomainNames = [
+          "openwebui.hoyer.world"
+          "syncthing.hoyer.world"
+        ];
+      };
     };
   };
 }