Fix riverside port mapping, postgres volume path, and enable HTTPS

- Map container port 80 (not 8080) to host 3011
- Mount postgres data at /var/lib/postgresql (postgres 18 changed path)
- Set TRUSTED_HOST env var so Drupal accepts the hostname
- Enable ACME/HTTPS for riverside.coldairnetworks.com with HTTP→HTTPS redirect

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

nixos/nginx.nix

@@ -138,12 +138,15 @@
         };
       };
       "riverside.coldairnetworks.com" = {
-        enableACME = false;
+        enableACME = true;
-        forceSSL = false;
+        forceSSL = true;
-        addSSL = false;
 
         locations."/" = {
           proxyPass = "http://127.0.0.1:3011/";
+          extraConfig = ''
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header Host $host;
+          '';
         };
       };
       "quineglobal.com" = {