nix-deploy/unstable/config/hosts/wind/services/acme.nix

{ config, ... }:

{
  security.acme = {
    acceptTerms = true;
    email = "admin+certs@graven.dev";
		certs = {
			"graven.dev" = {
				extraDomainNames = [ "*.graven.dev" ];
				dnsProvider = "hurricane";
				credentialsFile = config.secrets.files.acme_graven_dev.file;
			};
			"graven.se" = {
				extraDomainNames = [ "*.graven.se" ];
				dnsProvider = "hurricane";
				credentialsFile = config.secrets.files.acme_graven_se.file;
			};
		};
  };
}