{ config, ... }:

{
  security.acme = {
    acceptTerms = true;
    email = "admin+certs@graven.dev";
    certs."graven.dev" = {
      dnsProvider = "hurricane";
      credentialsFile = config.secrets.files.acme_graven_dev.file;
    };
    certs."turn.graven.dev" = {
      dnsProvider = "hurricane";
      credentialsFile = config.secrets.files.acme_turn_graven_dev.file;
    };
    certs."rss.graven.dev" = {
      dnsProvider = "hurricane";
      credentialsFile = config.secrets.files.acme_rss_graven_dev.file;
    };
    certs."git.graven.dev" = {
      dnsProvider = "hurricane";
      credentialsFile = config.secrets.files.acme_git_graven_dev.file;
    };
    certs."vault.graven.dev" = {
      dnsProvider = "hurricane";
      credentialsFile = config.secrets.files.acme_vault_graven_dev.file;
    };
  };
}