Add TLS

[zopsicle]

TLS should be enabled for the website. Do this with Let’s Encrypt.

Will probably put Nginx in front of Cro/Rakudo since I don’t trust the implementation of the latter as much and I don’t want to get owned due to a buffer overflow.

The following tasks must be fulfilled:

• [x] Nix derivation generates Nginx wrapper and config.
• [x] Deploy script generates and installs systemd service.
• [x] Deploy script installs Let’s Encrypt.

EDIT: Using Caddy instead of Nginx. See below.

[zopsicle]

@arianvp recommended I look at Caddy as it handles TLS automatically and can server static files as well as proxy.

It is also written in a memory-safe language which is a plus.