anchor.diff:            EMAIL_DOMAIN_ALLOWLIST = "example.com";
           };
         };
  +
  +      services.nginx = {
  +        virtualHosts."mastodon.local" = {
  +          enableACME = pkgs.lib.mkForce false;
  +          sslCertificate = "${cert pkgs}/cert.pem";
  +          sslCertificateKey = "${cert pkgs}/key.pem";
  +        };
  +      };
       };
   
       client = { pkgs, ... }: {
  
positive.code:     server.succeed("su - mastodon -s /bin/sh -c 'mastodon-env tootctl ip_blocks remove 192.168.0.0/16'")
      client.succeed("curl --fail https://mastodon.local/about")
  
      ca.shutdown()
      server.shutdown()
      client.shutdown()
    '';
  
negative.code:       };
  
        security = {
          pki.certificateFiles = [ "${cert pkgs}/cert.pem" ];
        };
  
        services.redis.servers.mastodon = {
  