rm custom root ca. add remote journald

modules/nixos/common/default.nix

@@ -2,11 +2,10 @@
 
 {
   imports = [
+    ./journald.nix
     ./nix.nix
     ./overlays.nix
 
-    ../pki
-
     inputs.synix.nixosModules.device.server
   ];
 

modules/nixos/common/journald.nix

@@ -0,0 +1,6 @@
+{
+  services.journald.upload = {
+    enable = true;
+    settings.Upload.URL = "http://100.64.0.5:19532";
+  };
+}

modules/nixos/default.nix

@@ -6,7 +6,6 @@
   forgejo-runner = import ./forgejo-runner;
   gnome = import ./gnome;
   monero = import ./monero;
-  pki = import ./pki;
   rsshub-oci = import ./rsshub-oci;
   tailscale = import ./tailscale;
   xfce = import ./xfce;

modules/nixos/pki/default.nix

@@ -1,3 +0,0 @@
-{
-  security.pki.certificateFiles = [ ./root_ca.crt ];
-}

modules/nixos/pki/root_ca.crt

@@ -1,12 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIBrzCCAVWgAwIBAgIQDV0M0pLkCXvARpa+ipSx8jAKBggqhkjOPQQDAjA2MRUw
-EwYDVQQKEwxzaWQtaW50ZXJuYWwxHTAbBgNVBAMTFHNpZC1pbnRlcm5hbCBSb290
-IENBMB4XDTI2MDQxODIwMzkwMloXDTM2MDQxNTIwMzkwMlowNjEVMBMGA1UEChMM
-c2lkLWludGVybmFsMR0wGwYDVQQDExRzaWQtaW50ZXJuYWwgUm9vdCBDQTBZMBMG
-ByqGSM49AgEGCCqGSM49AwEHA0IABCH2VmIwKEjdma4UymD7RWuGcaT2algrL5nm
-TE0NzP8giezdU9bEP487AvUPPibSYDWxdp4ycbl6qNVTiy29xkmjRTBDMA4GA1Ud
-DwEB/wQEAwIBBjASBgNVHRMBAf8ECDAGAQH/AgEBMB0GA1UdDgQWBBRaiBACRDZk
-HZMU9y8YsUF4WPB+5TAKBggqhkjOPQQDAgNIADBFAiAh+b49V2VTnT6nRCRM0Qwq
-ruzayrrnmF7pIxi9PVFwBQIhANQsL3ok4gCTRAnT0mUXSyWexzSESZ1lkpLYiyoj
-RgLi
------END CERTIFICATE-----