infrastructure/machines/core-services-01/acme-ssl.nix

{ config, lib, ... }:

let
  my = config.my;
in
{
  security.acme.acceptTerms = true;
  security.acme.defaults.email = my.email;

  security.acme.defaults.server =
    if my.acmeStaging
    then "https://acme-staging-v02.api.letsencrypt.org/directory"
    else null;
}