feat: deploy prowlarr in remote machine

but reverse proxy it from the local machine over tailscale

nixos/tsuba/services/resolved.nix

@@ -0,0 +1,9 @@
+{...}: {
+  services.resolved = {
+    enable = true;
+    dnssec = "true";
+    domains = ["~." "lemur-newton.ts.net"];
+    fallbackDns = ["1.1.1.1#one.one.one.one" "1.0.0.1#one.one.one.one"];
+    dnsovertls = "true";
+  };
+}