(since every time we have to change anything on these I get annoyed at having to remember how to build these. Now you can just use `nix run`!)
however, for some reason, ACME still fails. Hopefully it's just the rate limit, but it does look suspicious; there' still a "www.muc.hacc.space" in the log that oughtn't be there …