feat(vouch): separate local cookie

systems/hakurei/nixos.nix

@@ -26,7 +26,7 @@ in {
     nixos.ddclient
     nixos.acme
     nixos.nginx
-    nixos.vouch
+    nixos.vouch.local
     nixos.access.nginx
     nixos.access.global
     nixos.access.mosquitto
@@ -77,13 +77,6 @@ in {
     };
   };
 
-  # configure a secondary vouch instance for local clients, but don't use it by default
-  services.vouch-proxy = {
-    authUrl = "https://${virtualHosts.keycloak'local.serverName}/realms/${config.networking.domain}";
-    domain = "login.local.${config.networking.domain}";
-    settings.cookie.domain = "local.${config.networking.domain}";
-  };
-
   security.acme.certs = {
     hakurei = {
       inherit (nginx) group;

systems/keycloak/nixos.nix

@@ -17,7 +17,7 @@ in {
     nixos.keycloak
     nixos.vaultwarden
     nixos.cloudflared
-    nixos.vouch
+    nixos.vouch.gensokyo
     nixos.nginx
     nixos.access.vaultwarden
   ];