use wildcard cert

nixos/configuration.nix

@@ -51,7 +51,7 @@
   security.acme = {
     acceptTerms = true;
     defaults = {
-      # use staging testing
+      # use staging for testing
       server = "https://acme-staging-v02.api.letsencrypt.org/directory";
       # use prod for deploy
       # server = "https://acme-v02.api.letsencrypt.org/directory";