{ config, ... }:
{
  age.secrets.acme-cloudflare-env.file = ../secrets/acme-cloudflare-env.age;

  security.acme.acceptTerms = true;
  security.acme.defaults = {
    email = "franck@fcuny.net";
    dnsResolver = "1.1.1.1:53";
    dnsProvider = "cloudflare";
    credentialsFile = config.age.secrets.acme-cloudflare-env.path;
  };
}