{ config, lib, ... }:

lib.mkIf config.sACME.enable {
  security.acme = {
    acceptTerms = true;
    defaults.email = config.sACME.email;

    certs."${config.sACME.domain}" = {
      dnsProvider = "ovh";
      environmentFile = "/etc/acme.env";
    };
  };
}