nixos-config/modules/system/services/server/webserver/acme/default.nix

{ config, lib, ... }:
{
  config = lib.mkIf config.services.nginx.enable {
    security.acme = { 
      acceptTerms = true;
      defaults.email = "contact@${config.domains.p2}";
    };
    environment.persistence."/persist".directories = [
      "/var/lib/acme"
    ];
  };
}