{ config, lib, pkgs, ... }:

{
  security.acme = {
    acceptTerms = true;
    defaults.email = "armael@deuxfleurs.fr";
    defaults.dnsProvider = "gandiv5";
    defaults.credentialFiles = {
      "GANDIV5_PERSONAL_ACCESS_TOKEN_FILE" = "/etc/secrets/acme/gandi_access_token";
      "GANDIV5_API_KEY_FILE" = "/etc/secrets/acme/gandi_api_key";
    };
    # certs."isomorphis.me" = {};
    # certs."mail" = {
    #   domain = "smtp.isomorphis.me";
    #   extraDomainNames = [
    #     "imap.isomorphis.me"
    # 	"smtp.tremeg.net"
    # 	"imap.tremeg.net"
    # 	"smtp.gueneau.me"
    # 	"imap.gueneau.me"
    #   ];
    # };
    certs."pastila.isomorphis.me" = {};
  };
}