{ config, lib, ... }:

lib.mkIf config.module.acme.enable {
  security.acme = {
    acceptTerms = true;
    defaults.email =  "noreply@wateir.fr";

    certs."${config.module.domain}" = {
      dnsProvider = "ovh";
      environmentFile = "/etc/acme.env";
    };
  };
}