diff --git a/hosts/tadpole/modules/certs/default.nix b/hosts/tadpole/modules/certs/default.nix
new file mode 100644
index 0000000..2b1760b
--- /dev/null
+++ b/hosts/tadpole/modules/certs/default.nix
@@ -0,0 +1,12 @@
+{ ... }:
+{
+  security.acme = {
+    certs = {
+      "ppp.pm" = {
+        webroot = "/var/lib/acme/acme-challenge/";
+        email = "p@ppp.pm";
+        group = "nginx";
+      };
+    };
+  };
+}
diff --git a/hosts/tadpole/modules/ppp.pm-site/default.nix b/hosts/tadpole/modules/ppp.pm-site/default.nix
index 06d889d..7f3b284 100644
--- a/hosts/tadpole/modules/ppp.pm-site/default.nix
+++ b/hosts/tadpole/modules/ppp.pm-site/default.nix
@@ -14,16 +14,6 @@ in
   };
 
   config = lib.mkIf (enabled && nginxEnabled) {
-    security.acme = {
-      certs = {
-        "ppp.pm" = {
-          webroot = "/var/lib/acme/acme-challenge/";
-          email = "p@ppp.pm";
-          group = "nginx";
-        };
-      };
-    };
-
     services.pppdotpm-site = {
       enable = true;
       domain = "ppp.pm";