remove bindmounts

hosts/fw.cloonar.com/modules/firewall.nix

@@ -130,6 +130,9 @@
         }
 
         table ip nat {
+          chain post {
+            iifname { "vb-*" } oifname { "server" } 10.42.97.1 comment "from internal interfaces"
+          }
           chain prerouting {
             type nat hook prerouting priority filter; policy accept;
           }

hosts/fw.cloonar.com/modules/gitea.nix

@@ -110,12 +110,12 @@ in
         isReadOnly = false;
       };
     };
-    bindMounts = {
-      "/var/lib/acme/gitea/" = {
-        hostPath = "${security.acme.certs.${domain}.directory}";
-        isReadOnly = true;
-      };
-    };
+    # bindMounts = {
+    #   "/var/lib/acme/gitea/" = {
+    #     hostPath = "${security.acme.certs.${domain}.directory}";
+    #     isReadOnly = true;
+    #   };
+    # };
     config = { lib, config, pkgs, ... }: {
       networking = {
         hostName = "gitea";