{
  security.acme = {
    acceptTerms = true;
    defaults = {
      email = "contact@m4siri.com";
    };
    certs."m4siri.com" = {
      webroot = "/var/lib/acme/acme-challenge/";
    };
    certs."mail.m4siri.com" = {
      webroot = "/var/lib/acme/acme-challenge/";
    };
  };
}