hosts/porter: Resolve nginx proxy upstreams via unbound

hosts/gatekeeper/configuration.nix

@@ -131,6 +131,7 @@
 
   clerie.nginx-port-forward = {
     enable = true;
+    resolver = "127.0.0.53";
     tcpPorts."443" = {
       host = "localhost";
       port = 22;

hosts/porter/configuration.nix

@@ -28,8 +28,19 @@
 
   profiles.clerie.common-webserver.httpDefaultVirtualHost = false;
 
+  services.unbound = {
+    enable = true;
+    resolveLocalQueries = false;
+    settings = {
+      server = {
+        interface = [ "127.0.0.1" ];
+      };
+    };
+  };
+
   clerie.nginx-port-forward = {
     enable = true;
+    resolver = "127.0.0.1";
     tcpPorts."80" = {
       host = "baikonur.dyn.weimarnetz.de";
       port = 80;