nix-deploy/config/hosts/wind/services/acme.nix

{ config, ... }:

{
  security.acme = {
    acceptTerms = true;
    defaults.email = "admin+certs@graven.dev";
  };
}