{ ... }: { security.acme.certs."spectrum-os.org" = { webroot = "/var/lib/acme/acme-challenge"; }; }