I decided to remove the porkbun provider just to simplify things since
DNS validation incurs a much longer wait than HTTP validation. I also
removed the default address stuff since they would need a port and they
shouldn't be required - I pulled them from sovr which is doing more
exotic things with IPv6.
I also disabled systemd.network since I got a warning about networking
conflict.
I moved the firewall directive to the networking file.
At this point the system comes up and nginx is hosting a static page.