infrastructure/hosts/cesium/services/acme/default.nix

{...}: {
  security.acme = {
    acceptTerms = true;
    defaults.email = "acme@fainsin.bzh";
  };
}