{ ... }:
{
  security.acme = {
    certs = {
      "ppp.pm" = {
        webroot = "/var/lib/acme/acme-challenge/";
        email = "p@ppp.pm";
        group = "nginx";
      };

      "git.ppp.pm" = {
        webroot = "/var/lib/acme/acme-challenge/";
        email = "p@ppp.pm";
        group = "nginx";
      };
    };
  };
}