{ config, ... }: { security.acme = { acceptTerms = true; email = "admin+certs@graven.dev"; certs = { "graven.dev" = { extraDomainNames = [ "*.graven.dev" ]; dnsProvider = "hurricane"; credentialsFile = config.secrets.files.acme_graven_dev.file; }; "graven.se" = { extraDomainNames = [ "*.graven.se" ]; dnsProvider = "hurricane"; credentialsFile = config.secrets.files.acme_graven_se.file; }; }; }; }