{ config, ... }: { security.acme = { acceptTerms = true; defaults = { email = "acme@kempkens.io"; dnsProvider = "cloudflare"; credentialsFile = config.age.secrets.acme-credentials.path; dnsResolver = "1.1.1.1:53"; dnsPropagationCheck = true; }; certs = { "daniel.sx" = { domain = "*.daniel.sx"; }; }; }; }