refactor: reorganize server modules

- Moved each individual service definition into a dedicated `services/`
  directory under every server module (e.g.
`modules/servers/bragi/services/`).
- Updated the corresponding `default.nix` files to import the renamed
  service modules from the new location.
- Applied the same changes across all server modules, ensuring
  the API and import paths remain consistent.

modules/servers/tyr/traefik.nix

@@ -1,45 +0,0 @@
-{config, ...}: {
-  services.traefik = {
-    enable = true;
-    staticConfigOptions = {
-      serversTransport.insecureSkipVerify = true;
-      log = {level = "DEBUG";};
-      certificatesResolvers = {
-        porkbun = {
-          acme = {
-            email = "crony@cronyakatsuki.xyz";
-            storage = "/var/lib/traefik/acme.json";
-            caserver = "https://acme-v02.api.letsencrypt.org/directory";
-            dnsChallenge = {
-              provider = "porkbun";
-              resolvers = ["127.0.0.1"];
-              propagation = {
-                delayBeforeChecks = 60;
-                disableChecks = true;
-              };
-            };
-          };
-        };
-      };
-      api = {};
-      entryPoints = {
-        web = {
-          address = ":80";
-          http.redirections.entryPoint = {
-            to = "websecure";
-            scheme = "https";
-          };
-        };
-        websecure = {
-          address = ":443";
-        };
-      };
-    };
-  };
-
-  systemd.services.traefik.serviceConfig = {
-    EnvironmentFile = ["${config.age.secrets.traefik.path}"];
-  };
-
-  networking.firewall.allowedTCPPorts = [80 443];
-}